Application Security Associate - SGA Inc.

Software Guidance & Assistance, Inc., (SGA), is searching for an Application Security Associate for a contract assignment with one of our premier financial services clients in Coppell, TX or Tampa, FL.

Responsibilities :
Our Risk Management teams work to protect the safety and soundness of our systems and are responsible for identifying, managing, measuring and mitigating a spectrum of key risk types including credit, market, liquidity, systemic, operational and technology in all existing and new products, activities, processes and systems.
The Technology Risk Management department is responsible for setting strategic direction in the areas of IT Risk and Information Security. They are accountable for maintaining the firm's corporate security policies and control standards and acting as an operational arm for monitoring threat intelligence.

• The Application Security Associate is responsible for the security testing and risk analysis of the firm's applications using various application security tools. Interaction with the firm's developers (Application Development (AD)) to provide guidance, best practices and technical assistance in remediating application security issues will be part of the responsibilities. The individual should possess strong application software expertise, along with excellent communication, and organizational skills.
• Specific Responsibilities:
  • Perform Ethical Application Penetration Testing (EAPT) on web applications and APIs.
  • Coordinate with application development teams to collect the application details.
  • Provide the vulnerability information in the predefined report format after performing the App Pentest using manual methodology and App Pentest tools such as Burp Suite and Web Inspect
  • Provide assistance to the developers in detailing the vulnerabilities reported along with the recommendations for remediation.
  • Align risk and control processes into day-to-day responsibilities to monitor and mitigate risk; escalates appropriately.

Required Skills:

• Minimum of 5 years of experience in application penetration testing
• Minimum of 3 years of experience in App Pentest tools such as Burp Suite and WebInspect
• Certified in OSCP or GWAPT
• Leadership Competencies for this level include:
  • Accountability: Demonstrates reliability by taking necessary actions to continuously meet required deadlines and goals.
  • Global Collaboration: Applies global perspective when working within a team by being aware of own style and ensuring all relevant parties are involved in key team tasks and decisions.
  • Communication: Articulates information clearly and presents information effectively and confidently when working with others.
  • Influencing: Convinces others by making a strong case, bringing others along to their viewpoint; maintains strong, trusting relationships while at the same time is comfortable challenging ideas.
  • Innovation and Creativity: Thinks boldly and out of the box, generates new ideas and processes, and confidently pursues challenges as new avenues of opportunity.

Preferred Skills:

• Bachelor's degree is desirable.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at https://sgainc.com/ .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy.