Information Security Analysts

Job Title: Information Security Analysts

Location: Winchester, KY

Employer: 4Consulting, Inc

Position Type: Full Time

Worksite: Remote

Position Summary

4Consulting, Inc is seeking a qualified Information Security Analysts to support technology consulting, application development, systems analysis, testing, data management, cybersecurity, infrastructure, or project delivery services for client projects. The selected candidate will perform duties consistent with the client’s project requirements and company delivery standards.

Essential Duties and Responsibilities

The candidate will be responsible for:

Perform manual and automated web application security assessments, penetration testing, and vulnerability analysis to identify security weaknesses, validate application resilience, and assess potential attack scenarios.

Conduct Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), and secure code reviews across modern application frameworks, identifying coding vulnerabilities, security gaps, and weaknesses in application design.

Analyze, reproduce, validate, and document security findings; eliminate false positives; assess risk severity and business impact; and provide practical remediation recommendations supported by appropriate technical evidence.

Collaborate with developers, architects, and project stakeholders to verify remediation, support vulnerability management, recommend secure development practices, and integrate application security activities throughout the software development lifecycle.

Minimum Qualifications

The position requires:

Education:

Bachelor’s degree in Computer Science, Information Technology, Engineering, Business, or related field, or equivalent combination of education and experience.

Experience :

Experience in application security testing, advanced manual penetration testing, DAST, SAST, and secure code review. Advanced proficiency is required across all four specified security testing skill areas.

Technical Skills:

Application Security Testing, Manual Penetration Testing, DAST, SAST, Secure Code Review, Web Application Security, Vulnerability Assessment, Risk Analysis, Vulnerability Remediation, Security Reporting

Business / Domain Skills:

Experience assessing application security across enterprise web applications, digital services, and interconnected software systems to identify vulnerabilities and reduce security risks.

Experience validating application security controls, identifying exploitable weaknesses, evaluating potential business impacts, and recommending remediation aligned with organizational security requirements.

Experience supporting secure software development practices, application risk assessments, vulnerability management, and security remediation throughout the software development lifecycle.

Experience collaborating with developers, architects, and security stakeholders to communicate findings, prioritize vulnerabilities, validate corrective actions, and improve application security standards.

Communication:

Ability to communicate with technical and business stakeholders.

Documentation:

Ability to prepare project documentation, status updates, and deliverables.

Work Authorization:

Must be legally authorized to work in the United States. Sponsorship may be considered where permitted by company policy and project requirements.

Certification Required

CEH or OSCP certifications are preferred

Travel Required

None

Supervisory Role

No

Preferred Qualifications

Advanced hands-on expertise in manual penetration testing, DAST, SAST, and secure code review, with the ability to validate vulnerabilities and distinguish exploitable issues from false positives.

Strong analytical, technical documentation, and communication skills, including the ability to prepare detailed security assessment reports with proof-of-concept evidence, risk ratings, business impact, and remediation guidance.

Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or comparable application security and penetration-testing certifications are preferred but not mandatory.

Equal Employment Opportunity Statement

4Consulting, Inc is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, citizenship status, immigration status where protected by law, or any other legally protected status. All candidates will be evaluated based on job-related qualifications, experience, skills, availability, and ability to perform the essential duties of the position.