Integrate with both the application development and security assurance divisions to ensure vulnerability findings are understood, remediated or baselined as appropriate.
Document & Socialize security findings and remediation solutions in an enterprise knowledge base.
Support the Information Assurance Branch and the SOC with scan analysis and partner with development teams to understand and remediate security findings.
Qualifications
Ability to obtain a U.S. government Security Clearance
Master's Degree and 3 years of relevant experience; OR
Bachelor's Degree and 5 years of relevant experience; OR
No degree and 9 years of relevant experience
Possesses at least one professional certification relevant to the technical service provided. Maintain a certification relevant to the product being deployed and/or maintained.
Preferred
Former Developer or Systems Administrator experience
Working knowledge of technologies used for building and deploying enterprise applications, such as, Maven, Grade, GIT, Jenkins, Ansible, Java, C#/.NET, Apache Tomcat, Apache HTTP Server, IIS, F5, Oracle, MSSQLSEVER, PostGres
Working knowledge and experience in AWS and Azure GovClouds
Ability to analyze DISA STIG audit compliance scan results and provide recommendations for resolution
Analyze security environment, provide recommendations
Working knowledge of JIRA, Service Now or equivalent
Working knowledge of operating system and dynamic application security testing scan tools – Invicti, Web Inspect, DAST/IAST suites
Experience using Python to automate tasks
Certifications
CEH, GFACT, GPEN, OSCP or other relevant industry certifications
Other Application based Technology specific certifiations
About steampunk
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $100,000 to $155,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk’s total compensation package for employees. Learn more about additional Steampunk benefits here.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. If you want to learn more about our story, visit http://www.steampunk.com.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.