Find Jobs
Find Jobs Near You – Available Work in Your Location
Testing Analyst
Career Insights for Vulnerability Analyst / Penetration Tester
See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.
Scorecard
Based on Virginia data
Review key factors to help you decide if this role fits your goals. How is this calculated?
What they do
A Vulnerability Analyst or Penetration Tester probes for and exploits security vulnerabilities in web-based applications, networks and systems. Penetration Tests are designed to achieve a specific, attacker-simulated goal and should be requested by customers who are already at their desired security posture. A typical goal could be to access the contents of the prized customer database on the internal network, or to modify a record in an HR system. Vulnerability Assessments are designed to yield a prioritized list of vulnerabilities and are generally for clients who already understand they are not where they want to be in terms of security. The customer already knows they have issues and simply need help identifying and prioritizing them.
$121,440 / year median in Virginia
+4% projected growth
Job Description
Title:
Testing Analyst Location:
Vienna, VA (Hybrid) Basic Purpose The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment. Responsibilities- Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
- Perform walk-throughs with business partners identifying actual versus expected controls
- Create test strategies to test actual controls
- Document all work performed to meet the IIA reperformance standard
- Document issues and final reports
- Present to leadership results of assessments
- Any other duties as assigned to support the program Qualifications
- Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
- Experience in audit and information security risk assessments
- Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
- Knowledge of
NCUA, FFIEC, GLBA, NIST
(including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks- Experience in working with all levels of staff, management, stakeholders, and third parties
- Effective planning and organizational skills
- Effective research, analytical and problem solving skills
- Strong verbal, written and interpersonal communication skills, including technical writing
- Bachelor Degree in business, information systems or related field or equivalent work/military experience
- CISSP, CISA, CCSP, CRISC or other Information Security certifications
- Ability to present findings and conclusions clearly and concisely
- Experience in working with all levels of staff, management, stakeholders, and third parties
- Ability to build effective relationships through rapport, trust, diplomacy, and tact
- Strong word processing and spreadsheet software skills Bank Secrecy Section Remains cognizant of and adheres to Client''s policies, procedures and regulations pertaining to the Bank