Detection & Response Analyst
3 months ago
The Managed AppSec Operations Analyst will be responsible for reviewing and validating application security findings produced by DAST scans. The analyst will provide subject matter expertise to the Managed AppSec Customer Advisor team to help with communicating findings, remediation guidance, and prioritization to customers. They will also assist with onboarding applications into InsightAppSec, configuring scans, and troubleshooting scan failures.
About the Team
The Managed AppSec team provides actionable application security findings and expertise to our customer base. This team is comprised of Operations Analysts and Customer Advisors who work together closely to deliver the service. The Operations Team provides technical backend support while the Customer Advisor team interfaces with customers. Operations Analyst serves as the subject matter expert in web application security vulnerabilities, and Rapid7's Insight AppSec DAST solution.
About the Role
In this role, you will:
- Review and Validate Vulnerabilities produced by insight appsec scan engine using various web application testing tools.(ZAP, Burp Suite)
- Troubleshooting all scan and configuration related issues produced by Managed Application Security Customers
- Assisting in technology deployment and client onboarding processes
- Work Closely with Customer Advisors and enabling
The skills you'll bring include:
- Familiar with common (OWASP Top 10/CWE Top 25) web application vulnerabilities t
- Prior Experience with manual Web Application Penetration Testing using industry standard tools (ex: Burp Suite)
- Ability to explain application security vulnerabilities to developers
Nice to have
- Development/Scripting experience (e.g. Python/JS)
- Experience and/or understand of the Software Development Life Cycle(SDLC)
We know that the best ideas and solutions come from multi-dimensional teams. That's because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don't be shy - apply today.
About Rapid7
At Rapid7, we are on a mission to create a secure digital world for our customers, our industry, and our communities. We do this by embracing tenacity, passion, and collaboration to challenge what's possible and drive extraordinary impact.
Here, we're building a dynamic workplace where everyone can have the career experience of a lifetime. We challenge ourselves to grow to our full potential. We learn from our missteps and celebrate our victories. We come to work every day to push boundaries in cybersecurity and keep our 11,000+ global customers ahead of whatever's next.
Join us and bring your unique experiences and perspectives to tackle some of the world's biggest security challenges.
#LI-PB1