Application Security Analyst

American Systems is an employee-owned company providing advanced business solutions to the defense, telecom and commercial markets - and have established a strong presence in the Washington DC metropolitan area.  American Systems employs 1,500 engineers, analysts, and technicians working in 22 offices nationwide with our corporate headquarters located in Chantilly, VA.  From systems engineering and network integration, to integrated telecommunications, to training services and products, we've excelled at establishing a strong history of creating and implementing innovative approaches to challenging problems. Now, American Systems invites you to join us in furthering our mission to develop bigger and better solutions as a Application Security Analyst in Alpharetta, GA.

The Application Security Analyst will be responsible for application and information security through the design, implementation and integration of appropriate application secure coding practices. Responsible to contribute to the development/maintenance of the global application security requirements.  Communicate requirements and good application security practices to relevant parties. Plan, coordinate and conduct application security reviews to verify compliance with global application security requirements. Collaborate with application teams to address application security issues.
 
Responsibilities:
- Coordinate with application teams during the development process to facilitate integration of security and secure coding requirements into overall development approach.
- Perform application security reviews/assessments for global applications
i.  Collaborate with application teams to ascertain security posture of individual applications
ii. Leverage open source and common commercial code scanning tools to capture metrics and issues
iii.Review software architecture for weaknesses in design and implementation
iv.Review application for best practices in coding

v.  Document Threat Models and perform application Risk Analysis

vi. Reverse engineer necessary design documentation

vii.  Develop Vulnerability reports and remediation

- Assist in approving relevant change management requests for global applications
- Maintain tight integration between relevant change management processes and application security efforts
- Effectively communicate and collaborate with application teams and technology teams and a global audience
- Assess situations and make decisions affecting the global applications
- Balance good security practices and operational/technical realities
- Must be capable of analyzing, understanding and addressing complex application security issues
- Strong technical understanding of:
i.  application security design/development practices with an emphasis on web based applications
 ii. application security vulnerabilities with an emphasis on web based applications
 iii.general security exposures and vulnerabilities
 iv.operational and infrastructural IT components

Qualifications:

Fluent in JAVA / JSP and common frameworks

Strong Application development experience

Experience in build processes including ANT

2+ years experience in code reviews

Bachelor of Science in Computer Science, Electrical Engineering, or related field

Information security and industry certifications beneficial, including CISSP

 

American Systems provides competitive salaries, comprehensive benefits, an ESOP (Employee Stock Ownership Plan), in addition to a separate 401K with company matching.

To submit your resume, please click on the ?Apply Now? button below or email your resume to blake.oneill@americansystems.com .