Security Analyst: Threat Modeling & App Vulnerabilities

360 IT Professionals is a Software Development Company based in Fremont, California that offers complete technology services in Mobile development, Web development, Cloud computing and IT staffing. Merging Information Technology skills in all its services and operations, the company caters to its globally positioned clients by providing dynamic feasible IT solutions. 360 IT Professionals work along with its clients to deliver high-performance results, based exclusively on the one of a kind requirement. Our services are vast and we produce software and web products. We specialize in Mobile development, i.e. iPhone and Android apps. We use Objective-C and Swift programming languages to create native applications for iPhone, whereas we use Android Code to develop native applications for Android devices. To create applications that work on cross-platforms, we use a number of frameworks such as Titanium, PhoneGap and Jquery mobile. Furthermore, we build web products and offer services such as web designing, layouts, responsive designing, graphic designing, web application development using frameworks based on model view controller architecture and content management system. Our services also extend to the domain of Cloud Computing, where we provide Salesforce CRM to effectively manage one’s business and ease out all the operations by giving an easy platform. Apart from this, we also provide IT Staffing services that can help your organization to a great extent as you can hire highly skilled personnel’s through us. We make sure that we deliver performance-driven products that are optimally developed as per your organization’s needs. Take a shot at us for your IT requirements and experience a radical change. Job Description • Participate in security planning and analyst activities.

• Performs security assessments and security attestations.
• Participates in security investigations and compliance reviews as requested.
• Make security analysis reports for security vulnerabilities and recommends feasible and appropriate options.
• Hands-on experience of Mobile Applications and Device security tools.
• Should have sound understanding of secure coding practices which are in conformance with OWASP Top 10, SANS and WASC.
• Understanding of various Application Security Threat Models and their applicability to existing and upcoming applications.
• Perform Vulnerability Analysis of applications based on the industry wide Application Security Threat Models like ASF, STRIDE and Risk Assessment model like DREAD.
• Prepare technical solutions to mitigate the vulnerabilities identified during threat modelling and vulnerability analysis.
• Hands-on experience of various Data Security Tools for Data Discovery, Governance, DLP, etc.
• Evaluate all design documentations and perform design assessments to ensure appropriate security controls are implemented within designs.
• Prepare strategies to mitigate vulnerabilities emanating from Vulnerability Assessments and Penetration Tests of Applications both at production level and source code level, i.e. DAST and SAST.
• Assist audit team in developing audit reports; present audit reports to top management, as needed and execute and properly document the audit process on a variety of cyber security environments.
• Possess strong analytical and problem solving abilities
• Worked on different security tools w.r.t. around VA, PC, DAST, SAST, PT.

Additional Information Thanks and Regards, Ankur Bhatia By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply #J-18808-Ljbffr 360 IT Professionals Inc.