Application Security Operations Specialist
Ai Security
Application Security
Data Analysis
Data Security
Facilities Management
Incident Management
Incident Response
Information Security
Information Technology (IT)
InfoSec
It Service Management
IT Services
ITSM
Management
Project Management
Risk Management
Security
Security Automation
Security Compliance
Security Operations
Security Scanning
Security Testing
Service Desk Tool
Service Management
ServiceNow
Servicenow
Software Development
Software Security
Job Description
Own operational execution and continuous improvement of application security scanning and verification across the organization.
Responsibilities
- Run automated and custom scan routines to detect application and source code vulnerabilities.
- Provide operational support for new frontier AI models and related testing harnesses.
- Support event and result handling, including identification, triage, resolution, false positive determination, verification, and closure in coordination with partners and Enterprise Remediation Governance.
- Participate in incident response activities and contribute relevant information to improve collaboration with control owners and remediation teams.
- Assist application teams with understanding and resolving security findings.
- Contribute to the development and implementation of application security technology strategy.
- Conduct proof-of-concept testing for next-generation scanning technologies.
- Optimize scanning platforms and improve resiliency through operational process improvements.
- Identify and map vulnerability detection gaps to appropriate technology solutions.
- Perform data and trend analysis to inform harness development and vulnerability management lessons learned.
Requirements
- 3+ years experience driving and/or supporting tool integration with workflow platforms (example: ServiceNow).
- Strong understanding of vulnerability management concepts and terminology.
- Excellent prioritization, communication, and mentoring skills.
Technologies
- ServiceNow
- MITRE ATT&CK
- NIST
- FFIEC
- Python, PowerShell, Bash
- Windows, UNIX
Desired Qualifications
- BS/MS in Information Technology, Cybersecurity, or a related field.
- Familiarity with MITRE ATT&CK, cloud-based scanning, and compliance frameworks (example: NIST, FFIEC).
- Experience with vulnerability rating methodologies.
- Background in Windows and UNIX administration.
- Proficiency with scripting languages (example: Python, PowerShell, Bash).
- Hands-on experience with AI-assisted vulnerability identification activities.
- Location: Washington, DC (onsite)
- Shift: 1st shift (United States of America)
- Hours: 40 hours per week
Similar Jobs
