Application Security Associate/Analyst

Company

Federal Reserve Bank of Cleveland

The Federal Reserve Bank of Cleveland’s mission is to foster the stability, integrity, and efficiency of the nation’s monetary, financial, and payment systems while representing the Fourth District perspectives.

As part of the nation’s central bank, we are a team of mission-driven professionals who are committed to serving with excellence.

Our core values are: Build Trust Every Day, Own Our Actions, Collaborate with Intention, and Be Open to Change.

For twenty-six years in a row, we’ve been named “One of Northeast Ohio’s Best Places to Work” by North Coast 99.

This prestigious award honors organizations with outstanding employment practices, including compensation, benefits, training, recruitment, retention, community services, and employee communications.

Follow us on LinkedIn, Twitter, Instagram, and our YouTube channel – Cleveland Fed

To be considered for this role, candidates must be a U.S.

citizen.

For the business lines supported by Cleveland (Pay.gov, Debit Gateway, TCMS/DVS, CIR, eCommerce and any potential future business lines) which are owned by the Department of Treasury’s Bureau of the Fiscal Service, The Application Security Associate or Application Security Analyst position provides leadership for protecting the confidentiality, integrity, and availability of web and/or mobile applications by establishing and enforcing system access controls; defining system security requirements, recommending improvements to system security frameworks, ensuring authorized access to systems through monitoring, performing testing or scanning for security vulnerabilities, and raising security awareness.

Essential Accountabilities


* Identify security related issues and define security requirements during all phases of the application development lifecycle.

 


* Review program/development documents to ensure adherence to secure coding standards, guidelines and security requirements.

  


* Coordinate with developers to ensure secure and resilient design, prototyping, development, testing, support, and documentation of moderately complex application software.


* Monitor for atypical usage of information system accounts and other abnormalities to identify possible breaches.

 


* Assist with FISMA initiatives, e.g., updating security plans, to support ISSO responsibilities.

 


* Coordinate the identification of security-related issues and definition of security requirements during all phases of the software development lifecycle (SDLC).


* Perform penetration testing activities to ensure web vulnerabilities are not present within Treasury Services applications.


* Conducts analysis and interpreting of cybersecurity trends and emerging risks, quantifies potential impact, and develops conclusions and recommended application security responses.


* Performs other duties as assigned or requested

Education and Experience - Application Security Assoc...