Cybersecurity Specialist

- Over 3 years of relevant experience in vulnerability management, web application penetration testing, and/or application security consulting is essential for consideration. - Security+ certification is mandatory. Having additional credentials like Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP), CompTIA Advanced Security Practitioner (CASP+), Offensive Security Certified Practitioner (OSCP), and/or AWS Cloud Administrator certification is advantageous. - Proficiency in Static and Dynamic Application Security Testing (SAST/DAST) is required. - Familiarity with MicroFocus Fortify static code analysis scans is preferable. - Strong analytical skills in security system analysis along with a solid understanding of Cyber and IT security risks, threats, prevention techniques, and security best practices. - Comprehensive knowledge of web technologies, including web applications, web services, and service-oriented architectures, plus associated network/web protocols. - Experience with cloud security practices and architectures, particularly with Azure and AWS, is desirable. - Knowledge of Federal Governance, Risk Management, Compliance tools, and content like vulnerability scanning and penetration tools, SCAP/STIG, Microfocus Fortify, SonarQube, Checkmarx, Qualys, BurpSuite, and Nessus/Tenable is preferred. - Solid grasp of federal information security processes, frameworks, standards, and regulations. - In-depth understanding of networking, network security, cloud security, and network monitoring solutions. - Experience in guiding compliant technologies, architectures, and solutions is beneficial. - Familiarity with Federal Governance, Risk Management, and Compliance tools such as eMASS, STIG, Nessus/Tenable, etc., is advantageous. - Experience aiding customers in Federal Government and/or adhering to industry-specific cybersecurity compliance and regulatory standards/frameworks (e.g., OWASP Top 10, NIST 800-53, etc.) is preferred. - Demonstrated experience in writing and formulating application security policies, procedures, standards, and guidelines. - Ability to multitask and efficiently support a cross-matrixed team while managing multiple client projects and internal team functions. - Capable of solving intricate information security challenges and offering strategic and pragmatic solutions to both the team and clients.