Public Trust Application Scanning Analyst

Job Summary

To support the National Institutes of Health, the full-time remote Public Trust Application Scanning Analyst will perform web application vulnerability scans, conduct security assessments, and collaborate with development teams to enhance application security.

Key responsibilities

• Perform authenticated and unauthenticated web application vulnerability scans and assessments
• Analyze application scan results to identify security vulnerabilities and provide remediation recommendations
• Support integration of security scanning into DevSecOps and CI/CD pipelines while promoting secure coding practices

Required qualifications

• Public Trust Clearance or ability to obtain one
• B.S. in Computer Science, Information Technology, or a related field
• 5+ years of experience in application security assessments or web application vulnerability scanning
• Experience with Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST)
• Preferred certifications include GWAPT, GWEB, CSSLP, OSWA, or CEH