Talent.com
Senior Information Security Analyst

Senior Information Security Analyst

automotosocialCentreville, VA, US
job_description.job_card.1_day_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

JOIN OUR WINNING TEAM AS A SENIOR DEV OPS SECURITY ANALYST

AT CARFAX, WE ARE CONSTANTLY EXPANDING OUR PRODUCT AND TECHNOLOGY OFFERINGS! This means we are continually bringing new, innovative products to market through exciting technology initiatives to help our customers. Come join the success in Biz Tech. As a Senior Dev Ops Security Analyst, you will be responsible for guiding technical teams in building secure products in a DevOps model. The position aims to enhance security within the software development lifecycle through simple, automated tools that integrate seamlessly into developers' workflows. See if you have what it takes to join Team CARFAX!

THE TECH CULTURE AT CARFAX

Having a creative and innovative environment where our techies can collaborate, learn, and grow is something CARFAX is passionate about. We have an entire floor dedicated to our tech teams, designed specifically to enable big ideas and high-quality output. Along with creating and maintaining excellent software, you'll also have opportunities to participate in quarterly Hack-a-thons or relax by playing the latest games on Xbox. CARFAX is dog-friendly, providing dog beds, bowls, and toys, and encouraging visits from your furry friends!

AS A SENIOR DEV OPS SECURITY ANALYST, YOU WILL :

  • Serve as the technical point of contact for product teams regarding automation, CI / CD, and DevSecOps
  • Build tools and automation scripts to enable CARFAX developers to easily access security services
  • Enhance security accessibility through automation, continuous integration pipelines, and other means
  • Evaluate and recommend products and services across the corporate security technology stack
  • Research and advise on secure Cloud architecture designs following best practices
  • Work with teams to identify threats and vulnerabilities via threat assessments
  • Develop technical assessments for new technologies and third-party integrations, supporting security policy compliance
  • Develop hardened operating baselines based on industry standards and best practices
  • Create secure coding guidelines and provide security awareness and technical training
  • Perform and analyze vulnerability scans and penetration tests, guiding mitigation efforts
  • Lead security incident response, conduct forensic investigations, and determine root causes and response actions

QUALIFICATIONS :

  • Bachelor's degree in computer science or related field, or equivalent experience
  • 6+ years of experience developing secure software using TDD / Agile / XP / Lean methods
  • Experience in cloud, e-commerce, and mobile software release environments
  • Proficiency with development tools such as Jenkins and GitHub
  • Familiarity with scripting languages like Python, Perl, PowerShell
  • Understanding of application stack technologies (HTTP, HTML5, AJAX, REST, JSON) and platforms (AWS, ReactJS, AngularJS, Java, Spring Boot, MySQL, MongoDB, Hadoop, iOS, Android)
  • Experience with containers and Kubernetes
  • Knowledge of cryptography concepts (encryption, key storage, hashing, crypto libraries)
  • Hands-on experience with port and network scanning tools (Nessus, Nexpose, Nmap)
  • Experience with web application scanners and SAST / DAST testing platforms (Netsparker, Veracode)
  • Experience with firewall, network security, and intrusion detection products (Cisco ASA, F5, Sourcefire, Okta)
  • Familiarity with logging, alerting, and file integrity monitoring tools
  • Deep understanding of application vulnerabilities, threat vectors, and mitigations
  • Knowledge of IP protocols, network security architecture, and threats
  • Familiarity with security standards and compliance regulations (ISO 27001, NIST, OWASP, PCI DSS)
  • Preferred security certifications (CISSP, CSSLP, CEH, GSSP, GWEB)

    • ABOUT CARFAX

    CARFAX, a unit of IHS Markit, helps millions daily with vehicle history information. Since 1984, we provide services like Carfax Used Car Listings, MyCARFAX, and the Carfax Vehicle History Report. We own the world's largest vehicle history database and have been recognized as a top workplace by The Washington Post and Glassdoor. Based in London, IHS Markit is a leader in critical information, analytics, and solutions.

    J-18808-Ljbffr

    serp_jobs.job_alerts.create_a_job

    Information Security Analyst • Centreville, VA, US

    Job_description.internal_linking.related_jobs
    • serp_jobs.job_card.promoted
    Senior Information Security Engineer / Vulnerability Manager

    Senior Information Security Engineer / Vulnerability Manager

    C2 Labs, Inc.Washington, DC, United States
    serp_jobs.job_card.full_time
    Senior Information Security Engineer / Vulnerability Manager.C2 Labs partners with clients on their IT transformation journey via our industry-leading capabilities in full stack development, hyper-...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_1_day
    Insider Threat Information Systems Security – Senior Data Analyst

    Insider Threat Information Systems Security – Senior Data Analyst

    H4 EnterprisesArlington, VA, USA
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    H4 Enterprises are currently seeking the following : .Insider Threat Information Systems Security - Senior Data Analyst will be responsible for analyzing, detecting, and mitigating potential insider ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    Information Security Analyst (SOC 2 Compliance)

    Information Security Analyst (SOC 2 Compliance)

    TevoraFairfax, Virginia, United States, 22030
    serp_jobs.job_card.full_time
    Information Security Analyst (SOC 2 Compliance).Information Security Analyst (SOC 2 Compliance).If you havent heard of Tevora, its because weve done our job!. Tevora is a tight-knit community of pro...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    • serp_jobs.job_card.new
    Information Systems Security Manager

    Information Systems Security Manager

    SlopeWashington, DC, United States
    serp_jobs.job_card.full_time
    Anduril Industries is a defense technology company with a mission to transform U.By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the def...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_hours
    Information Systems Security Engineer (ISSE)

    Information Systems Security Engineer (ISSE)

    Mantis Security CorporationReston, VA, US
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    Mantis Security is a leading specialty firm of high caliber talent who specialize in Cyber Operations, Cyber Defense, Information Assurance, Software Development, DevSecOps, Security Engineering, a...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Information Systems Security Engineer

    Senior Information Systems Security Engineer

    Leidos IncColumbia, MD, United States
    serp_jobs.job_card.full_time
    Senior Information Systems Security Engineer (ISSE).National Security Sector's (NSS) Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer N...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Senior Information Systems Security Officer (ISSO-3)

    Senior Information Systems Security Officer (ISSO-3)

    Leidos IncLaurel, MD, United States
    serp_jobs.job_card.full_time
    Senior Information Systems Security Officer (ISSO).National Security Sector's (NSS) Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Ne...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Information System Security Manager (ISSM)

    Information System Security Manager (ISSM)

    The Johns Hopkins University Applied Physics LaboratoryLaurel, MD, United States
    serp_jobs.job_card.full_time
    Do you love solving problems while enabling impactful research to operate securely?.Are you passionate about making meaningful contributions to national security cyber missions?.Do you like collabo...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Information Security Analyst

    Information Security Analyst

    TradeJobsWorkForce22202 Arlington, VA, US
    serp_jobs.job_card.full_time
    Monitor their organization’s networks for security breaches and investigate a violation when one occurs Install and use software, such as firewalls and data encryption programs, to protect sensitiv...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Cyber and Information Systems Security Analyst / ISSO

    Cyber and Information Systems Security Analyst / ISSO

    The Johns Hopkins University Applied Physics LaboratoryLaurel, MD, United States
    serp_jobs.job_card.full_time
    Are you searching for challenging and impactful work supporting Highly Classified networks?.Are you passionate about cybersecurity operations and policy?. If so, we're looking for someone like you t...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    Senior Information Systems Security Officer

    Senior Information Systems Security Officer

    Telophase CorporationLanham, MD, US
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    Telophase Corporation is seeking a motivated, career and customer-oriented senior Information Systems Security Officer (ISSO) to join our team. The ISSO shall ensure the implementation and maintenan...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Information Systems Security Manager

    Information Systems Security Manager

    Leidos IncBethesda, MD, United States
    serp_jobs.job_card.full_time
    Leidos' High Fidelity Simulation Business Area is responsible for architecting and implementing large-scale System of Systems solutions in support of world class simulation, training, and analysis ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Information Security Engineer

    Information Security Engineer

    International Legal Technology AssociationWashington, DC, United States
    serp_jobs.job_card.full_time
    The Information Technology Department of Arnold & Porter has an opening for an Information Security Engineer in the Washington, DC office or may work 100% virtual / remote in a firm-approved U.The In...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    Senior Security (SOC) Analyst, Secret Clearance Required

    Senior Security (SOC) Analyst, Secret Clearance Required

    UltraViolet CyberHerndon, Virginia, United States, 20170
    serp_jobs.job_card.full_time
    UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners w...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    SOC Security Analyst L3

    SOC Security Analyst L3

    BlueVoyantHybrid in College Park, Maryland, MD, US
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    SOC Security Analyst L3 Location : .Hybrid in College Park, Maryland (1-2 days per week in office) Shift Requirement : BlueVoyant's U. Commercial SOC operates on a four days on, three days off sc...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    • serp_jobs.job_card.promoted
    Cyber Security Analyst

    Cyber Security Analyst

    VirtualVocationsAlexandria, Virginia, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cyber Security Analyst I.Key Responsibilities Pursue skills in the standard intelligence cycle including collection, analysis, and dissemination on various topics Rese...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Security Analyst / Audit Liaison

    Senior Security Analyst / Audit Liaison

    OmnisciusWashington, DC, US
    serp_jobs.job_card.full_time
    Senior Security Analyst / Audit Liaison.Our client is seeking a Senior Security Analyst / Audit Liaison to support a Department of Homeland Security (DHS) program. This role is critical to ensuring ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30
    • serp_jobs.job_card.promoted
    Senior Information System Security Officer (ISSO)

    Senior Information System Security Officer (ISSO)

    Leidos IncAlexandria, VA, United States
    serp_jobs.job_card.full_time
    Leidos National Security Sector combines technology-enabled services and mission software capabilities in the areas of cyber, logistics, security operations, and decision analytics to support our d...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    Information Security Analyst

    Information Security Analyst

    UmbraArlington, VA, US
    serp_jobs.job_card.full_time +1
    serp_jobs.filters_job_card.quick_apply
    Umbra is an American space technology company delivering advanced systems, from sensors to spacecraft, that empower customers worldwide with unmatched access to critical information from space.Our ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_variable_days
    Information Systems Security Engineer (Senior) - TS required to apply; Washington DC

    Information Systems Security Engineer (Senior) - TS required to apply; Washington DC

    Bow Wave LLCWashington, DC, USA
    serp_jobs.job_card.full_time
    serp_jobs.filters_job_card.quick_apply
    Minimum eight (8) years experience.Responsible for the secure design, analysis, and test of information security systems and. Ensure technical documentation exists for all systems and is kept up to ...serp_jobs.internal_linking.show_moreserp_jobs.last_updated.last_updated_30