DHHS- PSO IT Security Specialist

DHHS- PSO IT Security Specialist - Junior

[Raleigh, NC, 27612] |   2023-11-02 08:35:52

Apply Now

Share Job 

Job Code : NC039

Hello,

Hope you are doing good.

Position: DHHS- PSO IT Security Specialist - Junior (721946)

Location: Dix Campus, Raleigh, North Carolina

Duration: Long Term

Client: State of NC

Job ID: 721946

Job Description:

We are looking for an Information Technology (IT) professional with a strong background in application security testing, utilizing tools such as BURP Suite, Fortify, and manual testing.

NC DHHS - Privacy and Security Office (PSO) requiring services of an IT Security Specialist to perfrom application security testing, etical hacking and vulnerabilty managent of MES applications. 

•             Implement the security framework within the DevSecOps environment, leveraging security testing tools like BURP Suite, Fortify, and manual testing.

•             Work with a variety of application development frameworks, including .NET, Java, Spring Boot, and others.

•             Identify and assess OWASP top 10 vulnerabilities and provide guidance to the application development team for remediation.

•             Utilize vulnerability management tools, such as Qualys, to identify and promptly address vulnerabilities while collaborating with stakeholders.

•             Showcase expertise in operating systems such as Linux and Windows, as well as proficiency in Command-line interfaces.

•             Possess excellent troubleshooting skills and a strong aptitude for technical learning.

•             Conduct HIPAA Privacy & Security Risk Assessments to ensure compliance and data security.

Risk Management - must be able to Identify gaps through risk management, and assist in the development of mitigation strategies.

Required

2

Years

Experience updating privacy and security policies based on gaps found through an assessment process.

Required

2

Years

Discover, evaluate, assess, systems, networks, and components through the use of vulnerability scanning and risk assessment method.

Required

2

Years

Experience documenting vulnerability assessment results in a accurate, clear, actionable, and available way to appropriate personnel

Required

2

Years

Eperience in using application security tools such as BURP suite, Fortfy etc.

Required

2

Years

Must be able to serve as a knowledge base for organizations as it relates to compliance requirements and mitigation strategies.

Required

2

Years

Experience in conductin manual security testing. .

Required

3

Years

Experience with network mapping and vulnerability scanning tools such as NESSUS and NMAP.

Required

2

Years

Experience with application development frameworks such as .net, java etc.