NFCU's Application Whitelisting team needs to review, enhance, and implement controls to ensure applications used within NFCU comply with key security policies and standards, preventing unauthorized software execution and reducing security vulnerabilities.
Requirements
- Exposure to scripting languages such as Python or PowerShell.
- Familiarity with application security tools (e.g., Microsoft Defender, Black Duck, Checkmarx).
- Experience with data analysis or reporting tools (e.g., SQL, Excel, or analytics platforms).
- Understanding of ServiceNow and CMDB concepts.
- Knowledge of software development methodologies (e.g., Agile, DevOps, SDLC) is a plus.
- Proficiency in Microsoft Office tools.
- Familiarity with general IT concepts and business processes.
Responsibilities
- Analyze and categorize application data from tools such as Microsoft Defender, Black Duck, and Checkmarx to identify inconsistencies and build a centralized whitelisting inventory.
- Design and automate reporting mechanisms for whitelisting status, risk scores, and ownership to improve visibility and decision-making.
- Collaborate with ServiceNow and CMDB teams to validate data ingestion, resolve discrepancies, and align with enterprise architecture standards.
- Support attestation workflows and governance discussions to ensure whitelisting policies align with enterprise standards and reduce risk exposure.
- Develop scripts and APIs to automate data integration and streamline inventory maintenance.
- Identify and reconcile inconsistencies in application metadata across multiple enterprise tools and repositories.
- Use scripting and automation to streamline data preprocessing and ensure real-time updates to the whitelisting inventory.
Other
- Currently pursuing a degree in Cybersecurity, Information Systems, Computer Science, or a related field.
- Strong analytical and problem-solving skills.
- Excellent communication and collaboration abilities.
- Interest in process automation and enterprise security governance.
- To qualify, applicants must be currently enrolled in an accredited college or university and have an anticipated graduation date of December 2026 or later.
