Application Security Analyst [J.d. Irving, Limited - It Division]

Application Security Analyst

The Application Security Analyst is a collaborative member of the IT Security Team reporting to the Team Lead - Security Operations. This dynamic role is critical to ensuring the confidentiality, availability and integrity of J.D. Irving, Limited's purchased or custom developed applications. The candidate must have a thorough understanding of security technologies, application development practices, and be effective at influencing a team of technology professionals in a large, fast paced organization.

As an Application Security Analyst, you will work with project teams across the organization to ensure appropriate security controls are applied and test throughout the software development lifecycle. You manage risk by leveraging existing controls and capabilities, and by identifying gaps. You will help business stakeholders understand and accept or mitigate these risks.

You will verify and provide evidence of systems security through detailed analysis and creation of review reports and documentation. You will brief senior security leadership on the results of your analysis.

Your Focus

• Participate in security design and implementation throughout software development life cycle
• Create and update IT Security policies
• Provide documentary evidence of testing results to project team for remediation
• Perform technical and security analysis reviews and assessments within the software development lifecycle
• Identify and manage vulnerabilities using a variety of toolsets
• Manage technical controls to ensure that the organization is protected in accordance with its risk appetite
• Conduct purple team exercises

You Have

• 3 years' experience in application development
• A University Degree or College Diploma in Computer Science, Cyber Security or other relevant field
• An understanding of implementing risk management practices
• Experience in the hardening of web and API infrastructure
• Understanding of secure coding standards, OWASP Top Ten , Web Application Firewalls and Certificate management
• Knowledge of vulnerability management programs
• Understanding of penetration testing tools and techniques or Red Team exercises

You Are

• A strong communicator - both written and verbally
• Able to communicate efficiently with senior leadership on complex technical issues and topics
• Knowledgeable in application development concepts and technology
• Able to initiate and pursue independent work
• Passionate about IT Security
• Able to initiate and pursue independent work

Extras

• CISSP, OSCP, GPEN, or other relevant certification
• Experience in performing penetration testing
• Eligible to obtain required Government security clearances

JDI IT:Who we are and what we offer

At JDI IT,the belief that what people experience matters more than technologyispart of our foundational core.

With over 300 employees, we offerthe opportunity to create real value by helping people and businesses work smarter.JDI IT supportsthe entireJ.D. Irving Limited group of companieswhich means weoffer opportunities and experiences across a wide breadth of IT areas, businesses and industries. From forestry, to transportation, to shipbuilding, we are working directly with our business counterparts to align to thier strategies to continue advancements in IT. As a member of the JDI IT team, you will be a key player in enabling the business to win by overcoming obstacles and "getting it done"!

Webelieve in the power of diverse teams andinvest in continuous professional growth.We are seeking naturally curious change makers looking to join a collaborative and motivated team.Come help JDI IT Raise the Bar!

We appreciate your interest in our company! Only those candidates selected for an interview will be contacted.