GENERAL SUMMARY:

The Web Application Security Analyst is a key member of the Application Security Service Team supporting the Web Application Security team by processing results and reports from security scanning tools, formalizing findings, tracking results, and coordinating with developers to ensure code vulnerabilities are remediated. The role contributes to the organization's application security posture by managing vulnerability tracking and reporting metrics to management. Although the position is technical by nature, champions policies, processes, and procedures to enable secure controls for implemented applications that meet best practice and regulatory standards. The Web Application Security Analyst reports to the Director of Application Security Services. This position will work in a collaborative effort within the Information Privacy and Security Office and application developers to ensure software development life cycle policies, standards and controls are followed.

KEY ROLES AND RESPONSIBILITIES:

Processing and formalizing security scan results and reports from tools; tracking vulnerability findings.

Following up with developers to ensure code fixes are implemented; producing monthly KPI reports and performance charts for management

Monitoring and maintaining security scanning tools; attending project meetings to represent the application security team.

EDUCATION/EXPERIENCE REQUIRED:

Bachelor's degree in business, Information Technology, Cybersecurity, or related field required.

Minimum five (5) years experience Web Application development experience in designing and implementing software systems, building mission-critical and highly reliable software required.

Exceptional understanding in mitigating OWASP Top 10 attacks on web applications/services, cryptography, key management, PKI, TLS/SSL, DDoS mitigation, authentication, authorization, and/or general web application security.

Strong understanding of secure/rugged engineering concepts such as secure coding practices and secure code reviews used to identify, mitigate, and prevent threat vectors. Understanding of vulnerability management lifecycle and process.

Strong understanding of security architecture and tools which can be leveraged for Application Security mitigation.

Experience with Security Assessment Toolsets and manually test and validate reported vulnerabilities.

Strong Knowledge of relational databases, structured query language, and client/server relationships in multi-tier environments.

Ability to communicate clearly and concisely to drive change through verbal and written communication.

Cyber security risk management experience, e.g., conducting assessments, identifying risks, and recommending solutions.

Additional Information

Organization: Corporate Services

Department: Ascension Info_Network Scrty

Shift: Day Job

Union Code: Not Applicable

Additional Details

This posting represents the major duties, responsibilities, and authorities of this job, and is not intended to be a complete list of all tasks and functions. It should be understood, therefore, that incumbents may be asked to perform job-related duties beyond those explicitly described above.

Overview

Henry Ford Health partners with millions of people on their health journey, across Michigan and around the world. We offer a full continuum of services - from primary and preventative care to complex and specialty care, health insurance, a full suite of home health offerings, virtual care, pharmacy, eye care and other health care retail. With former Ascension southeast Michigan and Flint region locations now part of our team, Henry Ford's care is available in 13 hospitals and hundreds of ambulatory care locations. Based in Detroit, Henry Ford is one of the nation's most respected academic medical centers and is leading the Future of Health: Detroit, a $3 billion investment anchored by a reimagined Henry Ford academic healthcare campus. Learn more at henryford.com/careers .

Benefits

The health and overall well-being of our team members is our priority. That's why we offer support in the various components of our team's well-being: physical, emotional, social, financial and spiritual. Our Total Rewards program includes competitive health plan options, with three consumer-driven health plans (CDHPs), a PPO plan and an HMO plan. Our team members enjoy a number of additional benefits, ranging from dental and eye care coverage to tuition assistance, family forming benefits, discounts to dozens of businesses and more. Employees classified as contingent status are not eligible for benefits.

Equal Employment Opportunity/Affirmative Action Employer

Equal Employment Opportunity / Affirmative Action Employer Henry Ford Health is

committed to the hiring, advancement and fair treatment of all individuals without regard to

race, color, creed, religion, age, sex, national origin, disability, veteran status, size, height,

weight, marital status, family status, gender identity, sexual orientation, and genetic information,

or any other protected status in accordance with applicable federal and state laws.

Henry Ford Health System

New Jobs

Application Security Analyst