Senior Information Security Analyst

Skills

• Sound knowledge of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA).
• Sound knowledge of public cloud infrastructure
• Practical knowledge of implementing security controls in public cloud deployments/workloads
• Practical knowledge of Governance Risk and Compliance (GRC) tools
• Practical knowledge of infrastructure and application security scanning tools
• Deep understanding of vulnerability management and penetration testing
• Acumen with Artificial Intelligence tools
• Sound knowledge of risk management framework and standards
• Sound knowledge of Information Security frameworks and standards including ISO 27001, NIST 800-53 etc.
• Suggested Qualifications/Experience:
• You have previous hands-on experience implementing information security controls across a wide range of domains including Endpoint Security, Application Security, and Infrastructure Security.
• You have hands-on experience with public cloud services like Amazon Web Services (AWS), Azure etc.
• You have hands-on experience performing vulnerability assessments and penetration tests.
• You have demonstrable experience working with teams that have implemented security controls based on ISO 27001/NIST 800-53, CSAE 3416/SSAE18, SOC1/2/3.
• You have experience using enterprise-grade governance risk and compliance (GRC) tools.
• You have experience assessing security control implementations on large enterprise, web scale and serverless environments.
• You have experience engaging stakeholder in remediating security-related findings
• You have experience supporting an audit exercise by generating security-related evidence
• This position is to fill an existing vacancy
• D2L operates in a hybrid work style, with expectation of 3 days per week in office.
• The expected base salary range for a new hire in this role is listed below. The annualized base salary offered is determined by each candidate’s relevant knowledge, skills, education, training and experience. It is aligned to ensure both internal and external competitiveness using market data for the geographic location and industry. As part of the total compensation at D2L the role may be eligible for additional benefits including a Wellness Subsidy, Equity Grants, Variable Incentive, and more.