{"schemaVersion":"jobsearcher.job.v1","id":"32fa4f037b36070b86febafa","url":"https://jobsearcher.com/jobs/32fa4f037b36070b86febafa","canonicalUrl":"https://jobsearcher.com/jobs/32fa4f037b36070b86febafa","title":"Senior Vulnerability Code Analyst","description":"Senior Vulnerability Code Analyst\n**Location**: Washington, DC (Remote with potential onsite requirements)\n**Reports To**: Chief Information Security Officer (CISO)\n**Contract Type**: Labor-Hour\n\n**Position Summary**:\nThe Senior Vulnerability Code Analyst is responsible for performing comprehensive vulnerability code analysis on the HBX's platforms, primarily developed in Ruby on Rails. This role requires deep technical expertise in both Ruby on Rails and secure coding practices to ensure that all code changes undergo thorough security review before deployment.\n\n**Key Responsibilities**:\n**Vulnerability Analysis**:\nPerform static and dynamic code analysis using tools such as Fortify, Checkmarx, Veracode, SonarQube, and Burp Suite.\nAnalyze HBX's Ruby on Rails codebase for security vulnerabilities and ensure that secure coding practices are followed.\nConduct threat modeling and risk assessments for new and existing code.\n\n**Remediation Support**:\nCollaborate with development teams to manage the vulnerability remediation process, providing guidance on fixing security issues.\nEnsure compliance with industry-standard security practices (e.g., OWASP Top Ten, CWE/SANS Top 25).\n\n**Security Awareness**:\nLead efforts to incorporate secure coding practices into the software development lifecycle (SDLC).\nDevelop and deliver training on secure coding to development teams.\n\n**Required Qualifications**:\n**Technical Skills**:\nProficiency in Ruby and familiarity with other programming languages such as PHP, Bash, PowerShell, and Python.\nExpertise in using static and dynamic code analysis tools (e.g., Fortify, Checkmarx, Veracode, SonarQube, Burp Suite).\nStrong understanding of common cybersecurity vulnerabilities and attack vectors.\n\n**Certifications**:\n**Preferred**: Offensive Security Certified Professional (OSCP), GIAC Web Application Penetration Tester (GWAPT), Certified Secure Software Lifecycle Professional (CSSLP).\n\n**Experience**:\nExtensive experience in vulnerability management, threat modeling, and risk assessment.\nProven track record in leading vulnerability remediation efforts in a complex software environment.\n\n**Personal Attributes**:\nStrong analytical and problem-solving skills.\nExcellent communication skills, with the ability to articulate security issues to both technical and non-technical audiences.\n\n**Salary**:\nCompetitive, commensurate with experience.\n\n**Application Process**:\nInterested candidates should submit a resume and cover letter outlining their qualifications and experience as it relates to the Senior Vulnerability Code Analyst position.","company":"New Light Technologies In","rawCompany":"new light technologies in","city":"Washington","state":"DC","isRemote":false,"isActive":false,"createdAt":"2026-04-12T20:47:25.214Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.04","title":"Penetration Testers","slug":"penetration-testers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Senior Vulnerability Code Analyst","description":"Senior Vulnerability Code Analyst\n**Location**: Washington, DC (Remote with potential onsite requirements)\n**Reports To**: Chief Information Security Officer (CISO)\n**Contract Type**: Labor-Hour\n\n**Position Summary**:\nThe Senior Vulnerability Code Analyst is responsible for performing comprehensive vulnerability code analysis on the HBX's platforms, primarily developed in Ruby on Rails. This role requires deep technical expertise in both Ruby on Rails and secure coding practices to ensure that all code changes undergo thorough security review before deployment.\n\n**Key Responsibilities**:\n**Vulnerability Analysis**:\nPerform static and dynamic code analysis using tools such as Fortify, Checkmarx, Veracode, SonarQube, and Burp Suite.\nAnalyze HBX's Ruby on Rails codebase for security vulnerabilities and ensure that secure coding practices are followed.\nConduct threat modeling and risk assessments for new and existing code.\n\n**Remediation Support**:\nCollaborate with development teams to manage the vulnerability remediation process, providing guidance on fixing security issues.\nEnsure compliance with industry-standard security practices (e.g., OWASP Top Ten, CWE/SANS Top 25).\n\n**Security Awareness**:\nLead efforts to incorporate secure coding practices into the software development lifecycle (SDLC).\nDevelop and deliver training on secure coding to development teams.\n\n**Required Qualifications**:\n**Technical Skills**:\nProficiency in Ruby and familiarity with other programming languages such as PHP, Bash, PowerShell, and Python.\nExpertise in using static and dynamic code analysis tools (e.g., Fortify, Checkmarx, Veracode, SonarQube, Burp Suite).\nStrong understanding of common cybersecurity vulnerabilities and attack vectors.\n\n**Certifications**:\n**Preferred**: Offensive Security Certified Professional (OSCP), GIAC Web Application Penetration Tester (GWAPT), Certified Secure Software Lifecycle Professional (CSSLP).\n\n**Experience**:\nExtensive experience in vulnerability management, threat modeling, and risk assessment.\nProven track record in leading vulnerability remediation efforts in a complex software environment.\n\n**Personal Attributes**:\nStrong analytical and problem-solving skills.\nExcellent communication skills, with the ability to articulate security issues to both technical and non-technical audiences.\n\n**Salary**:\nCompetitive, commensurate with experience.\n\n**Application Process**:\nInterested candidates should submit a resume and cover letter outlining their qualifications and experience as it relates to the Senior Vulnerability Code Analyst position.","datePosted":"2026-04-12T20:47:25.214Z","dateModified":"2026-04-12T20:47:25.214Z","hiringOrganization":{"@type":"Organization","name":"New Light Technologies In","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington","addressRegion":"DC","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"32fa4f037b36070b86febafa"},"url":"https://jobsearcher.com/jobs/32fa4f037b36070b86febafa"}}