Public Trust Application Scanning Analyst

To support the National Institutes of Health, the full-time remote Public Trust Application Scanning Analyst will perform web application vulnerability scans, conduct security assessments, and collaborate with development teams to enhance application security. Key responsibilities Perform authenticated and unauthenticated web application vulnerability scans and assessments Analyze application scan results to identify security vulnerabilities and provide remediation recommendations Support integration of security scanning into DevSecOps and CI/CD pipelines while promoting secure coding practices Required qualifications Public Trust Clearance or ability to obtain one B.S. in Computer Science, Information Technology, or a related field 5+ years of experience in application security assessments or web application vulnerability scanning Experience with Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) Preferred certifications include GWAPT, GWEB, CSSLP, OSWA, or CEH