IPTA ยท 3 months ago
Software Assurance Security Analyst
IPTA's Technology Solutions Team is passionate about providing our customers with technical solutions that satisfy their business needs. As a Software Assurance Security Analyst, you will work with a team focused on delivering innovative business solutions, administering security applications, and conducting vulnerability assessments.
Information Technology
Responsibilities
Administer and maintain multiple Windows Server 2022 systems supporting the AvMC enterprise OpenText (Fortify) application security solution, including patch management, role-based access controls, and system hardening
Conduct secure code reviews and vulnerability assessments for enterprise and Directorate-level applications; provide mitigation strategies, integration/test support, and final disposition of identified issues in accordance with software assurance best practices
Apply and validate the Application Security and Development (ASD) STIG across multiple applications within the environment, ensuring compliance with DISA security benchmarks
Analyze vulnerability scan results (e.g., Fortify, SwAT) and correlate findings to application architecture, layered defense strategies, and DoD risk acceptance thresholds
Create and deliver user training, SOPs, and workflow guides aligned with DoD and Army Software Assurance and Cybersecurity standards
Maintain working knowledge of relevant cybersecurity and software development regulations, including DoD 8500.01, DoD 8510.01, AR 25-2, and NIST 800-53A
Perform full lifecycle application development IAW Army policies (AR 25-2), including secure coding practices, automated testing, and CI/CD pipeline integration
Qualification
Required
Bachelor's degree in a related field
Eight (8) years of prior experience in a similar role
Experience with ASP.NET, C++, C#, CSS, JavaScript, and Python
Experience with OpenText (Fortify) SAST and WebInspect DAST
Experience using Docker Desktop, Visual Studio, and VMware Workspace One
Strong communication and organizational skills
Active security clearance required
Preferred
DoD 8570 Level II/III certification desired