Senior Security Test & Evaluation Analyst

Seeking a Senior Security Test & Evaluation Analyst with strong experience in security testing, vulnerability assessment, ethical hacking, and AI-enabled security testing. The ideal candidate will combine traditional security assessment expertise with hands-on experience applying AI technologies to static/dynamic testing, control assessments, vulnerability analysis, and security validation across on-premises and cloud environments.

Key Responsibilities

* Conduct comprehensive security testing across reconnaissance, scanning, exploitation, and post-exploitation phases.
* Perform static/dynamic code reviews, architecture reviews, control assessments, and vulnerability testing.
* Implement and integrate AI-enabled solutions into security test and evaluation processes.
* Conduct authenticated and unauthenticated security testing across applications, infrastructure, and cloud environments.
* Analyze AI-generated security findings and identify vulnerabilities, exploitability, and remediation strategies.
* Support security testing across AWS, Azure, ServiceNow, and hybrid environments.
* Develop security metrics, technical reports, and analytic products demonstrating testing effectiveness.
* Collaborate with stakeholders to assess vulnerabilities, prioritize risks, and develop remediation plans.
* Ensure security testing and AI implementations comply with applicable governance, security, and regulatory standards.

Required Qualifications

* 5+ years of hands-on security test and evaluation experience.
* Experience with tools such as Tenable Nessus, GitLab, Fortify, Invicti, Mandiant, Kali Linux, and Wiz.
* 3+ years of experience testing cloud environments, including AWS and Azure.
* Strong hands-on experience with ethical hacking and penetration testing methodologies.
* Experience implementing AI solutions for security testing and evaluation.
* Experience identifying, validating, and analyzing security vulnerabilities and attack vectors.
* Strong stakeholder collaboration, analytical, problem-solving, and documentation skills.

Preferred Qualifications

* Experience applying AI-enabled capabilities to security testing in hybrid environments.
* Strong knowledge of network, operating system, database, web application, and cloud security.
* Knowledge of common vulnerabilities including SQL injection, XSS, CSRF, and API security.
* Experience with Windows, Linux, macOS, network devices, and security technologies.
* Experience working with NIST, FISMA, FedRAMP, and OMB security requirements.
* Strong technical communication and reporting skills.