Information Technology Security Analyst

Information Technology Security Analyst at Recurring Decimal Information Technology Security Analyst at Recurring Decimal in Charlotte, North Carolina Posted in 1 day ago.

Type:

full-time

Job Description:

We are seeking a skilled IT Security Analyst with a strong background in application penetration testing to help protect and strengthen enterprise application ecosystem. This role will serve as a key liaison between internal development teams and external security testing partners, ensuring vulnerabilities are identified, remediated, and validated effectively. Required Qualifications 5-7 years of experience in IT security, with a focus on application security and penetration testing. Strong understanding of application penetration testing methodologies and tools. Deep familiarity with OWASP Top 10 vulnerabilities and mitigation techniques. Experience working with external security vendors and managing testing engagements. Ability to interpret technical findings and communicate risks to both technical and non-technical stakeholders. Experience collaborating with application development teams in Agile or similar environments. Preferred Qualifications Hands-on penetration testing experience (web and/or API testing preferred). Relevant certifications such as CEH, OSCP, GWAPT, or similar. Familiarity with secure SDLC practices and DevSecOps methodologies. Experience with vulnerability management platforms and ticketing systems. Skills Application Security and Penetration Testing OWASP Vulnerability Analysis Risk Assessment and Remediation Tracking Cross-functional Collaboration Communication and Stakeholder Management Key Responsibilities Manage the end-to-end application penetration testing lifecycle, including planning, scheduling, execution, and retesting. Coordinate with third-party penetration testing vendors and internal application development teams. Review and validate penetration testing results, ensuring findings are accurate, prioritized, and actionable. Track remediation efforts and conduct or coordinate retesting of resolved vulnerabilities. Provide expert guidance to application developers on secure coding practices and vulnerability remediation. Advise leadership on application security risks, trends, and mitigation strategies. Ensure alignment with industry standards such as OWASP Top 10 and secure development best practices. Maintain documentation of findings, risk assessments, and remediation status.