NFCU's Application Whitelisting team needs to enhance and implement controls to ensure applications used within NFCU comply with security policies and standards, preventing unauthorized software execution and reducing security vulnerability exposure. This role aims to analyze, categorize, and automate the management of application data to build a centralized whitelisting inventory and improve visibility and decision-making.
Requirements
- Exposure to scripting languages such as Python or PowerShell.
- Familiarity with application security tools (e.g., Microsoft Defender, Black Duck, Checkmarx).
- Experience with data analysis or reporting tools (e.g., SQL, Excel, or analytics platforms).
- Understanding of ServiceNow and CMDB concepts.
- Knowledge of software development methodologies (e.g., Agile, DevOps, SDLC) is a plus.
- Proficiency in Microsoft Office tools.
Responsibilities
- Analyze and categorize application data from tools such as Microsoft Defender, Black Duck, and Checkmarx to identify inconsistencies and build a centralized whitelisting inventory.
- Design and automate reporting mechanisms for whitelisting status, risk scores, and ownership to improve visibility and decision-making.
- Collaborate with ServiceNow and CMDB teams to validate data ingestion, resolve discrepancies, and align with enterprise architecture standards.
- Support attestation workflows and governance discussions to ensure whitelisting policies align with enterprise standards and reduce risk exposure.
- Develop scripts and APIs to automate data integration and streamline inventory maintenance.
- Identify and reconcile inconsistencies in application metadata across multiple enterprise tools and repositories.
- Use scripting and automation to streamline data preprocessing and ensure real-time updates to the whitelisting inventory.
Other
- Currently pursuing a degree in Cybersecurity, Information Systems, Computer Science, or a related field.
- Strong analytical and problem-solving skills.
- Excellent communication and collaboration abilities.
- Familiarity with general IT concepts and business processes.
- Interest in process automation and enterprise security governance.
