Job Description

The Senior Security Analyst is the principal advisor in driving upgrades to UL’s technical requirements, programs, processes to maintain UL as the highest quality provider for cybersecurity services. Remain up to date on all cybersecurity related topics. Perceived as both the customer’s and internal security team’s trusted advisor. Conduct advanced penetration tests, hacking to identify issues in embedded products and software.

Responsibilities for Internal Candidates

• Provides upgrades to UL and industry technical requirements on security requirements along with other standard bodies by collaborating the Software & Security team.
• Conducts security tests using automated tools, ad-hoc tools, and manual testing.
• Conducts penetration testing against different technological domains including, but not limited to, web products, hardware products, wireless products, software, cloud based software, smart device applications.
• Assesses and calculates risk based on vulnerabilities and exposures discovered during testing.
• Creates required information security documentation, technical reports, and formal papers on test findings, and complete requests in accordance with requirements.
• Handles and completes customer projects to the defined requirements in the timeframe required by customers with the highest quality and integrity of work.
• Meets and exceeds customer expectations with projects and other related tests and activities.
• Supports security team in building and improving UL’s assurance programs and services.
• Supports the security team in building the lab for security services.
• Provides sales support and the sale of more complex projects.

Qualifications for Internal Candidates

• University Degree (Equivalent to a Master’s degree) in Computer Science or a related discipline plus generally four years’ experience in cybersecurity, software development, or ethical hacking.

• Experience installing and using various OS distributions and application packages.

• Hands-on experience with commercial, open source and free security solutions such as AppScan, Fortify, Maltego. Kali Linux, Nessus, OpenVAS, Qualys, Core Impact Pro, MetaSploit, nmap, nessus, ettercap, static source code analysis tools, fuzzing tools, dynamic binary testing tools

• Understanding of security issues on various operating systems, open source web and database platforms

• Experience scripting in one (1) or more of the following languages: sh, csh, perl, python, awk, ruby and programming experience in C, C++, Java

• Security related certifications a plus: CISSP, CISA, CEH, GIAC

• Strong expertise in testing in two or more of the following domains: Embedded software, embedded security, industrial control systems / SCADA, medical devices, telecom and networking equipment.

• Total Rewards: We understand compensation is an important factor as you consider the next step in your career. The estimated salary range for this position is $100,000 to $130,000 and is based on multiple factors, including job-related knowledge/skills, experience, geographical location, as well as other factors. This position is eligible for annual bonus compensation with a target payout of 10% of the base salary. This position also provides health benefits such as medical, dental and vision; wellness benefits such as mental and financial health; and retirement savings (401K) commensurate with the standard rewards offered in each individual location or country. We also provide full-time employees with paid time off including vacation (15 days), holiday including floating holidays (12 days) and sick time off (72 hours).

#LI-SG2

#LI-Hybrid

Job Tags

Similar Jobs