Information Security Analyst – App Security

Vaga não está no LinkedIn

🕒 Agosto 25

🏈 Ohio – Remoto

🏈 Ohio – Remote

⏰ Tempo Integral

🟢 Júnior

🔐 Analista de Segurança da Informação

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 38%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 79 dias.
• As vagas desta empresa costumam ser preenchidas em 46 dias.
• Repostada 3 vezes.
• Sem salário divulgado.

Candidatar-se

Encontrar Vagas Remotas Similares

BlueScope

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 1928

🏭 Manufatura

🏗️ Construção

Manufacturing • Sustainability • Construction

A BlueScope é uma fabricante global de aço comprometida com a entrega de soluções sustentáveis e inovadoras para seus clientes e comunidades. A empresa produz produtos de aço de classe mundial, conhecidos por sua durabilidade, resistência e versatilidade em diversas indústrias e aplicações. A BlueScope é dedicada a promover práticas sustentáveis que incentivem a responsabilidade ambiental, engajamento social e prosperidade econômica em suas operações.

Descrição

• Support cybersecurity operations across BlueScope North America • Participate in security monitoring, investigation, and incident response activities under the direction of senior security team members • Maintain operational documentation, procedures, metrics, and status reporting for cybersecurity activities • Monitor relevant security threats and vulnerabilities and escalate issues that may affect BlueScope operations • Support application security activities for BlueScope applications and development teams globally while operating primarily during U.S. business hours • Assist with security reviews for internally developed, externally developed, and third-party applications • Use SAST, DAST, SCA, API testing, and dependency scanning capabilities • Partner with development and technology teams to promote secure coding, security-by-design, and secure SDLC practices • Assist with application threat modeling, security requirements, and design reviews • Document application security findings, provide remediation guidance, and track findings through closure • Validate corrective actions and identify recurring issues addressable through standards, training, or automation • Assist with administration, configuration, and improvement of cybersecurity and application security tools • Support integration of security testing into development and CI/CD workflows • Use scripting or automation to improve repeatable security tasks, data collection, reporting, and workflow efficiency • Develop and maintain dashboards and metrics communicating security findings, remediation progress, and program performance • Support security activities aligned with BlueScope requirements and NIST Cybersecurity Framework, CIS Controls, ISO 27001, and OWASP guidance • Assist with internal and external audit requests involving cybersecurity and application security controls • Maintain records of security reviews, findings, remediation activities, exceptions, and risk decisions • Contribute to security standards, procedures, and technical guidance • Collaborate with application development, infrastructure, cloud, project, and business teams • Coordinate with global stakeholders across regions and time zones • Communicate security findings and recommended actions to technical and non-technical audiences • Support security awareness activities related to vulnerability management, secure development, and application security practices • Build technical knowledge through hands-on experience, training, and collaboration

🎯 Requisitos

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline • 1-3 years of experience in cybersecurity, information security, application support, software development, systems administration, or a related technology field • Foundational understanding of cybersecurity principles, vulnerability management, risk management, and security controls • Familiarity with application security concepts, including secure coding practices, OWASP Top 10 risks, and the Software Development Lifecycle • Exposure to vulnerability assessment, application security testing, or security monitoring technologies • Basic understanding of cloud, web application, API, network, and operating system security concepts • Familiarity with a scripting or programming language such as PowerShell, Python, JavaScript, Java, or a similar language • Strong analytical, organizational, documentation, and problem-solving skills • Effective written and verbal communication skills and ability to collaborate with globally distributed teams • Ability to work primarily during U.S. business hours, with periodic schedule flexibility for global collaboration or critical security events • Internship or professional experience supporting cybersecurity, application development, DevOps, cloud, infrastructure, or vulnerability management activities • Familiarity with SAST, DAST, SCA, API security testing, dependency scanning, or penetration testing tools • Exposure to CI/CD pipelines, source code repositories, cloud platforms, containers, or modern application architectures • Knowledge of NIST, CIS Controls, ISO 27001, OWASP, or similar security frameworks and guidance • Entry-level or associate security certification such as Security+, SSCP, GSEC, Azure Security Engineer Associate, or a comparable credential • Experience working in a manufacturing, industrial, or globally distributed organization

🏖️ Benefícios

• Health insurance • Life insurance • Short-term disability • Long-term disability • Paid time off • Retirement • Flexible working arrangements where possible and mutually agreed

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo