- Perform penetration testing against products and systems, including web applications, web services, and mobile devices
- Assist with coordination of vendor pen testing services with internal development teams.
- Collaborate with stakeholders to develop remediation strategies
- Demonstrating practical/working exploitation of security flaws
- Develop and enhance process to automate the delivery of application security metrics.
- Review SAST/DAST output for false positives. Assist development with remediation.
- Serve as an application security subject matter expert.
- Participate in threat modeling exercises.
- Effectively communicate vulnerability details, risks, and potential impacts to, application owners, developers, stakeholders, and partners.
- Act as a mentor for junior team members/interns.
- Design, implement, and support security-focused tools and services.
- Develop tools that improve security testing, reporting, and monitoring.
- Lead investigations into information security incidents.
- Drive efforts towards containment of threats and remediation of environment during or after an incident.
- Perform complex security investigations and root cause analyses.
- Assemble and coordinate with technical teams and third-party vendors to resolve incidents as quickly and efficiently as possible.
- Ensure that all incidents are recorded and tracked to meet audit and legal requirements where necessary.
- Coordinate ingestion of threat intelligence as it pertains to the response process and relevant vectors of attack.
- Coordinate Cyber Hunting exercises and maintain playbook.
- Oversee direction for SOC team and L1 response procedures.
- Build/Review use cases to be incorporated into the response process for real time alerting.
- 5+ years of experience in manual penetration testing of web and mobile applications
- Competent to work independently at an advanced technical level.
- Understanding of cloud technologies and environments (AWS, Azure, Google).
- Ability to demonstrate a clear understanding, at an enterprise level, of application, network, infrastructure, and data security architecture.
- Excellent analytical skills, able to manage multiple projects under strict timelines, work well in a demanding dynamic environment, and meet overall objectives.
- Ability to work under pressure and manage competing priorities.
- Knowledge of web application frameworks, deployment technologies and security software.
- Scripting capabilities for creating custom scripts to identify/exploit vulnerabilities.
- Strong writing skills to produce detailed reports for consumption by stakeholders at all levels from operations to executive.
- Proven work experience in manual secure code review.
- Experience working with GitLab Ultimate CI/CD technology, shift-left tools, and application security workflows.
- GPEN, OSCP, CISSP, GWAPT, CEH, or similar certifications.
- Desired scripting experience: One or more of Python, JavaScript, PowerShell, shell script, Ruby, PHP, LUA etc.
- Bachelor's degree in Information Technology or Computer Science, or equivalent experience.
- Inherent passion for information security and service excellence.
- The ability to adapt to new situations and the desire to learn and stay current with AppSec trends, threats, and risks.
-
Senior Security Detection Engineer
5 days ago
U.S. Bank Charlotte, United StatesAt U.S. Bank, we're on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each ...
-
Security Professionals
1 week ago
Allied Universal® Charlotte, United StatesSecurity Professionals - Downtown High Rise · **Overview**: · Allied Universal, North America's leading security and facility services company, provides rewarding careers that give you a sense of purpose. While working in a dynamic, diverse and inclusive workplace, you will be pa ...
-
Experienced Security Professionals
1 week ago
Allied Universal® Charlotte, United StatesExperienced Security Professionals · **Overview**: · Allied Universal, North America's leading security and facility services company, provides rewarding careers that give you a sense of purpose. While working in a dynamic, diverse and inclusive workplace, you will be part of a t ...
-
Critical Facility Security Officer
1 week ago
Allied Universal® Charlotte, United StatesCritical Facility Security Officer - Evening Shift · **Overview**: · Allied Universal, North America's leading security and facility services company, provides rewarding careers that give you a sense of purpose. While working in a dynamic, diverse and inclusive workplace, you wil ...
-
Pipefitters (Fabrication Shop)
5 days ago
Century Contractors, Inc Matthews, United States**Basic Scope/Purpose** · Lays out, fabricates, assembles, installs, and maintains piping and piping systems, fixtures, and equipment for steam, hot water, heating, cooling, lubricating, and industrial processing systems. · **Essential Functions/Duties** · - Select type and size ...
-
Training: Electronics Technician
1 week ago
Sapphire Solutions Matthews, United StatesYour job profile: · Are you interested in working with intelligent IT and are fascinated by smart solutions like the Internet of Things (IoT)? Then become an IT/IoT systems electrician for building technology (m/f/d) at Siemens and make sure that buildings and entire halls listen ...
-
Eclipse Innovations Matthews, United StatesAre you looking for an apprenticeship that you and your friends will think is cool and that will make your parents proud? Then start your apprenticeship LIKE A BOSCH now. · Buildings today are not just safe, functional places where people can live and work. They can also adapt to ...
-
beBee Handyman East Bend, NC, United States FreelanceThis is a hotel in East Bend, NC. We need surveillance every day of the year from 00:00 to 7:00.Where do you need the security and surveillance company's service? · Hotel · What type of security or surveillance service do you need? · Surveillance or patrol service · What skills a ...
-
Vulnerability Analyst
1 week ago
Randstad Digital Charlotte, United StatesResponsibilities · Provide vulnerability management and secure configuration baseline management oversight and governance for Infosys VM/SCM programs. Adjudicate risk-acceptance ("exception") requests and false positive requests, review VM metrics, shape and govern based on trend ...
-
Physical Security Pre Sales Engineer
4 days ago
Howard Technology Solutions Charlotte, United States*This position requires you to be located and frequently travel to customer sites around the North Carolina / South Carolina territory. Candidates currently located in NC / SC are preferred. · ABOUT HOWARD TECHNOLOGY SOLUTIONS · Howard Technology Solutions is a premier retailer ...
-
Cyber Security Engineer
1 week ago
Jones Grove IT Recruiting Charlotte, United StatesCyber Security Engineer · Permanent Position · Charlotte, NC – Hybrid · The Cyber Security Engineer is responsible for assisting with the day-to-day operations of securing the various information systems. This role will be tasked with designing, implementing, and maintaining s ...
-
Sr. Cyber Security Analyst
1 week ago
U.S. Bank Charlotte, United StatesAt U.S. Bank, we're on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each ...
-
Penetration Tester
2 weeks ago
Acruex Inc. Charlotte, United StatesNeed Local to Charlotte, NC · Key skills: ** Understanding of command lines; ** Penetration experience with web applications, mobile and API's; · Cyber Security Detection and Response Sr. Analyst. · ** Experience working with GitLab Ultimate CI/CD technology, shift-left tools, ...
-
Cyber Security Analyst
1 week ago
Insight Global Charlotte, United StatesJob Description · Hybrid in Charlotte, NC (2-3 days on-site) · * Proactively maintain and continually improve our overall security strategy, including policy enforcement mechanisms, ownership definitions, monitoring systems, and process controls · * Actively develop and refine se ...
-
Cyber Security Analyst
5 days ago
Insight Global Charlotte, United StatesProactively maintain and continually improve our overall security strategy, including policy enforcement mechanisms, ownership definitions, monitoring systems, and process controls · Actively develop and refine security standards, baselines, performance metrics; lead and conduct ...
-
Senior Information Security Engineer
1 week ago
Wells Fargo Charlotte, United StatesAbout this role: · Wells Fargo is seeking a Senior Information Security Engineer within technology as part of Cyber Security. Learn more about the career areas and business divisions at · Looking for someone with experience or education in tactical cyber-attack evaluation, exp ...
-
Cyber Security Analyst, Senior
2 weeks ago
Brookfield Renewable Charlotte, United StatesDeriva Energy, a portfolio company of Brookfield Renewable U.S., who is a nationwide leader in sustainable energy provides wind, solar, resilient backup power, and managed energy services to over 1,000 projects across the U.S., with a total electric capacity of more than 5,100 me ...
-
Cyber Security Analyst
2 weeks ago
Brookfield Renewable Charlotte, United StatesDeriva Energy, a portfolio company of Brookfield Renewable U.S., who is a nationwide leader in sustainable energy provides wind, solar, resilient backup power, and managed energy services to over 1,000 projects across the U.S., with a total electric capacity of more than 5,100 me ...
-
Cyber Security Analyst
2 weeks ago
Brookfield Renewable Charlotte, United StatesDeriva Energy, a portfolio company of Brookfield Renewable U.S., who is a nationwide leader in sustainable energy provides wind, solar, resilient backup power, and managed energy services to over 1,000 projects across the U.S., with a total electric capacity of more than 5,100 me ...
-
Cyber Security Specialist
1 week ago
Acruex Inc. Charlotte, United StatesOnsite role in Charlotte, North Carolina, United States · Cyber Security Detection and Response Sr. Analyst. · Key skills: · ** Understanding of command lines; · ** Penetration experience with web applications, mobile and API's; · ** Experience working with GitLab Ultimate CI/ ...
Sr. Cyber Security Detection - Charlotte, United States - Tandym Group
![Tandym Group background](https://contents.bebee.com/companies/us/tandym-group/background-uftKu.png)
Description
A top financial client is seeking a Cyber Security Detection & Response Sr. Analyst to work a hybrid schedule in Charlotte, NC.
Responsibilities:
The Sr. Analyst will: