Under supervision, assist with various security assessments via mock interviews, participation in assessment activities and collection of evidence
Under supervision, assist with Continuous Monitoring via review of scans, identification of vulnerabilities, tracking of remediation and interaction with various teams on recommended mitigation / remediation
Under supervision, assist with Providing a QA function for security components of product builds
Under supervision, leverage security tooling and reporting to ensure technical security findings are addressed and corrected. Coordinate with Build and Operations teams to ensure security tooling and logging are in place
Under supervision, participate in overall security activities such as process improvement, ticket review and response
Education:
AA degree + 2-4 years of experience, or BS degree in Computer Science, MIS, Computer Engineering, or similar field
0-2 years of experience or 5-8+ years of technology experiences in lieu of any degree
Preferred Qualifications:
Experience with security assessments of various frameworks such as FedRAMP, SOC, HIPAA, and ISO
Experience with remediation of findings and vulnerabilities that are identified through assessment, scanning or penetration testing, including experience with analysis of scan results, Plan of Actions and Milestones, response to assessment findings, etc.
Experiencewith Linux/Unix system administration, tools and architecture
Experiencewith cloud applications and cloud SaaS architecture (web/app/db) on a variety of hyperscalers (AWS/Azure/GCP)
Experience implementing and operationalizing security tools across a variety of applications and hyperscalers
Experience logging into Windows and Linux systems to pull audit evidence, and troubleshooting and remediating security findings
Effective communication and collaboration skills– experience working with other teams and customers on security challenges, assessment readiness,Continuous Monitoringtooling, vulnerabilities and remediations
Continuous learning mindset to stay current with the tools and the rapidly evolving cyber threat landscape
Motivated with a positive attitude and a strong bias towards taking corrective action and providing resolutions
Candidates with the below certifications and experience highly preferred:
Understanding of existing products and management workloads in the NS2 Cloud environment