Job Description
The Application Security Analyst position exists to protect the security posture of the Paycom application through tasks such as web application penetration testing, code review, tool use, and other measures.
Additional tasks include work to develop or improve existing projects that contribute to application security, and user education.
RESPONSIBILITIES
- Perform and lead web penetration test assessments on company applications and APIs.
- Analyze and report on findings from penetration tests to leadership and Development.
- Perform code review of application source code for security vulnerabilities.
- Analyze and report on findings from code review to leadership and Development.
- Communicate with developers to explain security findings and suggested remediation.
- Communicate with developers to find solutions to meet business and security requirements.
- Research the security of 3rd party tools, software libraries, APIs, etc.
- Research and work with other departments, especially Development, to suggest security solutions in alignment with security best practices and business needs.
- Perform basic system administration tasks on servers or applications.
- Assist and train fellow team members on department projects.
- Work with various security scanning tools to assess the security posture of the Paycom application and report on findings.
- Contribute to the creation, maintenance, and improvement of documentation around security, policies, standards, guides, and procedures where applicable.
- Contribute to planning and developing the Application Security program.
Education / Certification :
Bachelor's degree in Management Information Systems, Computer Science or Cyber Security
Experience :
- 1+ years of experience in IT related field
- 5+ years of experience in Application Security or IT Security experience
PREFERRED QUALIFICATIONS
Education / Certification :
- Master's degree in Management Information Systems, Computer Science or Cyber Security
- Industry Certification (GWAPT, GCIH, etc.)
Skills / Abilities :
- Strong experience with the OWASP Top 10 vulnerabilities list; can demonstrate finding, exploiting, and potential remediation for items from the Top 10
- Experience implementing information security principles and practices.
- Experience with one or more programming / scripting languages : PHP, Python, C#, Java, C++, C, JavaScript, React
- Basic experience with the following technologies is highly recommended but not required : SQL (MySQL / MSSQL / Postgres), NoSQL, HTML, CSS
- Understanding of cluster / container technologies : Kubernetes, Docker, etc.
- Experience with the following operating systems is highly recommended but not required : Linux distributions (Ubuntu, Kali Linux, Debian, Red Hat), iOS (current versions), Android OS (current versions), macOS (current versions)
- Strong analytical and problem-solving skills
- Strong verbal and written communication skills
Paycom is an equal opportunity employer and prohibits discrimination and harassment of any kind. Paycom makes employment decisions on the basis of business needs, job requirements, individual qualifications and merit.
Paycom wants to have the best available people in every job. Therefore, Paycom does not permit its employees to harass, discriminate or retaliate against other employees or applicants because of race, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, military and veteran status, age, physical or mental disability, genetic characteristic, reproductive health decisions, family or parental status or any other consideration made unlawful by applicable laws.
Equal employment opportunity will be extended to all persons in all aspects of the employer-employee relationship. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation benefits, and separation of employment.
The Human Resources Department has overall responsibility for this policy and maintains reporting and monitoring procedures.
Any questions or concerns should be referred to the Human Resources Department. To learn more about Paycom's affirmative action policy, equal employment opportunity, or to request an accommodation - Click on the link to find more information : paycom.com / careers / eeoc
BENEFITS : QUALIFICATIONS :
Application Security Analyst III
The Application Security Analyst position exists to protect the security posture of the Paycom application through tasks such as web application penetration testing, code review, tool use, and other measures. Increase your chances of an interview by reading the following overview of this role before...
Information Security Analyst III
Key Responsibilities:Architect security solutions for business applications based on security principlesImplement NIST-compliant continuous monitoring process across major information systemsSupport security assessment, information assurance, and vulnerability testingRequired Qualifications:Bachelor...
Application Security Analyst
The Application Security Analyst I position exists to protect the security posture of the Paycom application through tasks such as web application penetration testing, code review, tool use, and other as-needed security reviews. Utilize security scanners and other automation technology to assess the...
Cyber Security Analyst III
The Analyst III represents Information Security interests in projects internal and external to the department, performs risk and vulnerability assessments of new and existing applications and platforms, directs security-related data governance tasks, ensures compliance with applicable regulatory req...
Cyber Security Analyst III
Experience: Minimum of 5 years’ experience in an Information Security role is preferred Advanced knowledge of Information Security principles and practices to include, but not limited to, the following areas: Security Architecture, Risk and Vulnerability Management, Cloud Platform Security, Network-...
Remote Software Developers - AI Training (Contract)
We are seeking experienced software engineers and coders to be part of the artificial intelligence (AI) revolution. If you are an experienced software engineer, computer scientist, programmer, or just great at solving coding challenges (Codeforces, Sphere Online Judge, Leetcode, etc. Join our team i...
Business Analyst
The role of Business Analyst at Propylon is suitable for someone with several years of experience having previously worked as a Business Analyst where the position involved systems analysis, preferably in a client facing position. Propylon has an exciting opportunity for an experienced Business Anal...
Network Engineer
Cisco Certified Network Professional (CCNP) Cisco Certified Design Professional (CCDP) Cisco Certified Network Administrator (CCNA) Cisco Certified Design Associate (CCDA) Network +. One year of enterprise network engineering experience. Bachelor's degree in Computer Science, Management of Informati...
Senior Frontend Engineer Design Systems
A company is looking for a Senior Frontend Engineer, Design Systems. ...
Sr. Business Analyst
Our local client is adding a Senior Business Analyst to their organization for new growth in the technology division. Because of their size, there are plenty of directions to take your career as a Business Analyst within the organization. Responsibilities of Senior Business Analyst:. Qualifications ...