The Application Security Analyst I position exists to protect the security posture of the Paycom application through tasks such as web application penetration testing, code review, tool use, and other as-needed security reviews. Additional tasks include work to develop or improve existing projects that contribute to application security, and user education.

RESPONSIBILITIES

• Perform web penetration test assessments and manual code review.

• Utilize security scanners and other automation technology to assess the security posture of the Paycom application and document findings.

• Research 3rd party tools, software libraries, APIs, and other incoming technology for security viability and document any concerns prior to application integration.

• Advise and provide technical guidance to software development teams over security findings and remediation.

• Analyze security findings and escalate complex or recurring issues to other Application Security teams for further research as needed.

• Attend trainings, pursue certifications, and research vulnerabilities, remediations, and new technology to learn and stay up to date on security best practices.

• Contribute to the creation, maintenance, and improvement of documentation around security, policies, standards, guides, and procedures where applicable.

Qualifications

Education/Certification:

• Bachelors or Master’s Degree in Management Information Systems, Computer Science or Cyber Security.

Experience:

• Basic understanding of the OWASP Top 10 vulnerabilities.

• General knowledge of information security principles and practices.

• Basic understanding of web server architecture and relevant concepts: HTTP, TLS, DNS, WAF, etc.

• Experience with one or more programming/scripting languages highly recommended: PHP, Python, C#, Java, C++, C, JavaScript, React.

• Basic experience with the following technologies is recommended but not required: SQL (MySQL/MSSQL/Postgres), NoSQL, HTML, CSS

• Basic experience with the following operating systems is recommended but not required: Linux distributions (Ubuntu, Kali Linux, Debian, Red Hat), iOS, Android OS, macOS

• Strong analytical and problem-solving skills.

• Strong verbal and written communication skills

PREFERRED QUALIFICATIONS

Education/Certification:

• Industry Certification (GWAPT, GCIH, Security+, Pentest+, Burp Suite Certified Practitioner, etc.) preferred.

Paycom is an equal opportunity employer and prohibits discrimination and harassment of any kind. Paycom makes employment decisions on the basis of business needs, job requirements, individual qualifications and merit. Paycom wants to have the best available people in every job. Therefore, Paycom does not permit its employees to harass, discriminate or retaliate against other employees or applicants because of race, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, military and veteran status, age, physical or mental disability, genetic characteristic, reproductive health decisions, family or parental status or any other consideration made unlawful by applicable laws. Equal employment opportunity will be extended to all persons in all aspects of the employer-employee relationship. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation benefits, and separation of employment. The Human Resources Department has overall responsibility for this policy and maintains reporting and monitoring procedures. Any questions or concerns should be referred to the Human Resources Department. **To learn more about Paycom's affirmative action policy, equal employment opportunity, or to request an accommodation - Click on the link to find more information:** paycom.com/careers/eeoc