Prana Comunicación · 3 months ago
Software Assurance Security Analyst
Huntsville, AL
Full-time
Onsite
Senior Level, Lead/Staff
8+ years expPrana Comunicación is seeking a Software Assurance Security Analyst to join their Technology Solutions Team. The role involves administering Windows Server systems, conducting secure code reviews, and ensuring compliance with cybersecurity standards while delivering innovative solutions for government and business organizations.
Marketing & Advertising
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Administer and maintain multiple Windows Server 2022 systems supporting the AvMC enterprise OpenText (Fortify) application security solution, including patch management, role-based access controls, and system hardening
Conduct secure code reviews and vulnerability assessments for enterprise and Directorate-level applications; provide mitigation strategies, integration/test support, and final disposition of identified issues in accordance with software assurance best practices
Apply and validate the Application Security and Development (ASD) STIG across multiple applications within the environment, ensuring compliance with DISA security benchmarks
Analyze vulnerability scan results (e.g., Fortify, SwAT) and correlate findings to application architecture, layered defense strategies, and DoD risk acceptance thresholds
Create and deliver user training, SOPs, and workflow guides aligned with DoD and Army Software Assurance and Cybersecurity standards
Maintain working knowledge of relevant cybersecurity and software development regulations, including DoD 8500.01, DoD 8510.01, AR 25-2, and NIST 800-53A
Perform full lifecycle application development IAW Army policies (AR 25-2), including secure coding practices, automated testing, and CI/CD pipeline integration
Qualification
Required
Bachelor's degree in a related field
Eight (8) years of prior experience in a similar role
Experience with ASP.NET, C++, C#, CSS, JavaScript, and Python
Experience with OpenText (Fortify) SAST and WebInspect DAST
Experience using Docker Desktop, Visual Studio, and VMware Workspace One
Strong communication and organizational skills
Active security clearance required
Preferred
DoD 8570 Level II/III certification desired
Company
Prana Comunicación
Somos una Agencia de Comunicación que aplica creatividad y comunicación en campos tan disímiles como la construcción de una marca, la elaboración de un plan de negocios, el desarrollo de campañas educativas o el diseño de un nuevo producto.
11-50 employees
Funding
Current Stage
Early StageCompany data provided by crunchbase