Security Intern- CyberSource
Visa —
Bellevue, WA
Security Intern- CyberSource (Job Number:131819)
Location- United States-WA-Bellevue
Organization- CyberSource
Job- Business/Proj. Mgt.
Description
The Security intern is responsible for the tracking and organization of security findings. These findings come from a variety of sources, and we are looking for someone who can build an automated solution to pull the findings from the set of scanning tools we use and, using APIs from the scanning tool vendors, pull these findings into a master database. The solution needed will allow for administration of the findings within the master database, including typical report-like functionality and views such as sorting and filtering options on the data.
This is a good position for a talented, smart developer who wants some real-world experience in dealing with information security. You will be interacting with multiple security architects, developers, and security remediation teams across Visa and will be responsible for understanding the security remediation requirement needs of multiple product development teams.
As a security intern, you must prove you will be able to independently manage commitments and expectations of these different teams and demonstrate a service-minded attitude. Your attention to detail and work ethic must be beyond reproach. You will be responsible for supporting remote and international remediation teams in their solution development and testing efforts, so communication and transparency are must-have characteristics.
In this role, you will be dealing with Visa sensitive data, and so strength of character and trustworthiness are especially important characteristics. Satisfactory completion of an extensive background check will be required before this position can be offered.
Responsibilities:
- Learn and use the scanning tool APIs produced by various vendors.
- Create and maintain a database-driven .NET application to insert, store, and manage security findings generated by the various scanning tools.
- Create a browser based dashboard to allow users to sort, filter, view and report on various levels of detail on each finding.
- Create event monitors to allow workflow management of the security findings.
- Protect the finding data via appropriate access controls.
- Assist in the implementation of security remediations.
- Include highly structured and automated unit, functional, application, and/or regression tests in order to validate the proper function of the finding management tool you create.
- Work closely with Visas security engineers to understand and evaluate the remediation requirements for individual security findings.
- Develop an awareness of security finding characteristics to enable meaningful finding classification.
Qualifications
Requirements:
- At least three years work towards completion of a BS in Software Engineering, Computer Science, IS, or other related field.
- Demonstrated ability to work with distributed teams.
- Proven network and security diagnostic capabilities.
- Ability to use or leverage commercial/open source security scanning tools and their respective APIs. Examples may include but are not limited to Veracode, Appscan, WhiteHat, and Qualys.
- Knowledge and experience developing within an Agile development methodology is a plus.
- Experience developing dynamic, database-driven .NET applications is a must.
- Experience with Microsoft SQL and Oracle SQL Servers, including SQL Reporting Services.
- Java core experience a plus.
Technical skills:
Must Have skills
o .NET development
o SQL development
o Computer/Information security training
Nice to have skills
o 1. Agile development
o 2. Java
What would the typical work day look like for this contractor?
Developing the security finding management tool based on requirements provided by a senior program manager. This development will occur iteratively so recurring functionality extensions/improvement will be a normal part of the position.
