Application Security Associate/Analyst

About the role

The Application Security Associate or Application Security Analyst position provides leadership for protecting the confidentiality, integrity, and availability of web and/or mobile applications. This role supports the business lines owned by the Department of Treasury's Bureau of the Fiscal Service, including Pay.gov, Debit Gateway, TCMS/DVS, CIR, eCommerce, and any potential future business lines.

Responsibilities

• Identify security related issues and define security requirements during all phases of the application development lifecycle.
• Review program/development documents to ensure adherence to secure coding standards, guidelines and security requirements.
• Coverage of moderately complex application software development lifecycle (SDLC).
• Perform penetration testing activities to ensure web vulnerabilities are not present within Treasury Services applications.
• Conducts analysis and interpreting of cybersecurity trends and emerging risks, quantifies potential impact, and develops conclusions and recommended application security responses.
• Performs other duties as assigned or requested.

Requirements

• Ability to analyze highly complex business requirements.
• Thorough understanding of industry based security controls relating to applications, services, and systems.
• Knowledge of cloud-based platforms and technologies.
• Thorough understanding of security controls relating to access control, authentication, and auditing.
• Demonstrated knowledge and understanding of information security industry trends and emerging technologies, especially relating to application security vulnerabilities.
• Proficient at testing web application for security vulnerabilities, such as those listed in the Open Web Application Security Project (OWASP) Top 10 and familiar with the tools used for testing.

Qualifications

• Application Security Associate: Associates degree and 2 years of related work experience OR Bachelor’s degree and no prior related work experience.
• Application Security Analyst: Associates degree and 5 years of related work experience OR Bachelor’s degree and 3 years of related work experience OR Master’s degree and 0-1 year of related work experience.

Skills

• Ability to analyze highly complex business requirements.
• Thorough understanding of industry based security controls relating to applications, services, and systems.
• Knowledge of cloud-based platforms and technologies.
• Thorough understanding of security controls relating to access control, authentication, and auditing.
• Demonstrated knowledge and understanding of information security industry trends and emerging technologies, especially relating to application security vulnerabilities.
• Proficient at testing web application for security vulnerabilities, such as those listed in the Open Web Application Security Project (OWASP) Top 10 and familiar with the tools used for testing.

Pay

The expected starting salary range for the Application Security Associate is between $73,400 and $91,800 and the Application Security Analyst is between $81,600 and $102,300 annually. Final salary and offer will be determined by the applicant’s background, experience, skills, internal equity, and market data.

Schedule

This is a full-time regular position.

Benefits

The Cleveland Fed offers benefits to support overall health and financial security. Learn more about our benefits here: https://www.clevelandfed.org/careers.

Physical Demands and General Working Conditions

This is not necessarily an exhaustive list of all responsibilities, duties, standards or requirements, efforts, skills or working conditions associated with the job. While this is intended to be an accurate reflection of the current job, the Federal Reserve Bank of Cleveland reserves the right to revise this or any job description at any time.

Reasonable Accommodation Statement

The Federal Reserve Bank of Cleveland is committed to ensuring that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. To request a reasonable accommodation for any part of the employment process, please send an email to clev.4d.benefits.specialist@clev.frb.org.

Bank’s Ethics Rules and Drug Testing

As a condition of employment, Federal Reserve Bank of Cleveland employees must comply with the Bank’s ethics rules which generally prohibit employees, their spouses/domestic partners, and minor children from owning or controlling, directly or indirectly, any debt or equity interest in a depository institution or an affiliate of a depository institution. A "depository institution" means a bank, a trust company, or any institution that accepts deposits, including a bank chartered under the laws of a foreign country. In addition, employees (and their spouses/domestic partners, and minor children) may not own shares of mutual funds, unit investment trusts or ETFs that have a policy, as stated in the prospectus, of concentrating in the financial services industry and that have underlying investments in banks or other depository institutions. If you or your spouse/domestic partner or minor child own such securities and would not be willing or able to divest them if you accepted an offer of Bank employment, you should raise this issue with the recruiter for this posting. In addition, as a condition of employment, candidates must undergo a background check and will be tested for all controlled substances prohibited by federal law, to include marijuana, prior to hire and for certain safety sensitive positions during employment.