2 United Employees discussing airplane maintenance
Apply Now    

Senior Analyst – Application Security

Req #: WHQ00011340-ZN
Location: Chicago, IL US
Job Category: Information Technology

United Airlines is seeking talented people to join the IT Security, Risk, and Compliance team. This team helps to protect the information of our customers and employees and reduce business risk through strong security practices.

Overview

Come join a leading information security team in the aviation sector to help protect our customers and employees!

The Senior Analyst – Application Security is responsible for ensuring integration of cyber security into United’s application development and software development lifecycles.  They will spend time directly with developers performing detailed code reviews and explaining security deficiencies in programming techniques.  They will work closely with development teams to remediate vulnerabilities detected during application scans and will carry out risk assessments of new and existing applications and application infrastructure to enhance United’s cyber security posture.

If you're looking to further develop your skills through a variety of challenges and perform impactful work, this job is for you!

                          

Responsibilities:

  • Review raw code of critical applications for vulnerabilities
  • Conduct and manage application security testing
  • Act as the key resource for development teams in the remediation of vulnerabilities discovered by Vulnerability Management, Application Security, or outside vendors
  • Provide consultation services to development organizations and business units in the ideation phase to ensure secure application design
  • Conduct proactive risk assessments of existing applications to identify new and novel vulnerabilities previously unknown
  • Build simple and usable code artifacts that can be used in library form by many development teams
Required
  • Any combination of equivalent education, work experience, and formal training that allows the candidate to meet the requirements of the position
  • Excellent written and verbal communications skills
  • Ability to offer reasonable remediation solutions to problems created by insecure code
  • Technical writing and documentation
  • Good understanding of Information Security standards, frameworks, and best practices (e.g., OWASP)
  • Demonstrable experience with at least two of the following development languages: .Net, C#, Java, PHP, Objective-C, SQL, SOAP, REST, custom API, SAML, Python, Go, Swift
  • Experience with at least one code security review tool: Fortify, WebInspect, Burp, AppScan 
  • Understanding and awareness of documentation required in a secure software development lifecycle
  • Experience working with agile development groups
  • At least three years of experience in information technology
  • Ability to lead by example and influence change
  • Understanding of complex project timelines

Preferred

  • A software-development related BS or BA degree is preferred
  • CISSP and/or relevant SANS certifications are preferred

Other

  • Must be legally authorized to work in the United States for any employer without sponsorship
  • Candidate must currently have or meet the requirements to obtain a US Government SECRET security clearance

Equal Opportunity Employer – Minorities/Women/Veterans/Disabled/LGBT

 

INDUAL

DICEUAL


 

Equal Opportunity Employer – Minorities/Women/Veterans/Disabled/LGBT

Apply Now