6+ Months contract possible extension. Client is open to consider candidates in Sunnyvale, CA or remote location as well.
The Analyst will perform technical security engineering activitiesincluding the following:
Perform vulnerability scan, analysis, validationand remediation activities.
Perform network and application penetrationtesting.
Validate vulnerabilities discovered through codeanalysis.
Classify and prioritize the risk of newvulnerabilities according to the specifics of Verizon Media environment's risklevel, mitigating factors, and assessment of the impacts of internal andexternal threats.
Engineer application, system and networksecurity solutions to meet security requirements for varied operatingenvironments.
Research and assess new threats, vulnerabilitysecurity trends and security alerts, recommend remedial action.
Work with customers to oversee remediation ofidentified security issues.
Perform technical and non-technical complianceactivities.
Provide security subject matter expertise toVerizon Media product teams including developers and system administrators.
Perform security validation for configurationsettings on different systems.
Minimum Qualifications:
Bachelor’s degree with a minimum of 1 yearof information security work experience.
A strong interest in the field of informationsecurity.
Intermediate scripting, system administration orsoftware engineering background (e.g. Python, Ruby, Javascript, Perl, or Java).
Fluent in a variety of web applicationprotocols, operating systems and networking technologies.
Strong understanding of common networkvulnerabilities, OS vulnerabilities (Linux,
Windows and OSX), patching and attack patterns.
Strong understanding of OWASP Top 10vulnerabilities such as XSS, XSRF, SQL Injection, Cookie Manipulation amongothers.
Strong analytical, problem-solving andengineering skills.
Good written and verbal communication skills.
Solid organizational skills and strong customerservice skills.
Experience with parsing/analysis of large datasets (e.g. vulnerability scan results).
Experience with Splunk for analysis.
Desired Qualifications:
Certified Information Systems SecurityProfessional (CISSP).
Certified Ethical Hacker (CEH)
Familiarity with Enterprise VulnerabilityManagement tools such as Rapid 7 Nexpose, Nessus and Qualys. Familiarity withAmazon Web Services (AWS) security.
Job Type: Contract
Experience:
Location:
Work authorization:
Contract Renewal: