Job Title: Information Security Analysts
Location: Winchester, KY
Employer: 4Consulting, Inc
Position Type: Full Time
Worksite: Remote
Position Summary
4Consulting, Inc is seeking a qualified Information Security Analysts to support technology consulting, application development, systems analysis, testing, data management, cybersecurity, infrastructure, or project delivery services for client projects. The selected candidate will perform duties consistent with the client’s project requirements and company delivery standards.
Essential Duties and Responsibilities
The candidate will be responsible for:
Perform manual and automated web application security assessments, penetration testing, and vulnerability analysis to identify security weaknesses, validate application resilience, and assess potential attack scenarios.
Conduct Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), and secure code reviews across modern application frameworks, identifying coding vulnerabilities, security gaps, and weaknesses in application design.
Analyze, reproduce, validate, and document security findings; eliminate false positives; assess risk severity and business impact; and provide practical remediation recommendations supported by appropriate technical evidence.
Collaborate with developers, architects, and project stakeholders to verify remediation, support vulnerability management, recommend secure development practices, and integrate application security activities throughout the software development lifecycle.
Minimum Qualifications
The position requires:
Education:
Bachelor’s degree in Computer Science, Information Technology, Engineering, Business, or related field, or equivalent combination of education and experience.
Experience:
Experience in application security testing, advanced manual penetration testing, DAST, SAST, and secure code review. Advanced proficiency is required across all four specified security testing skill areas.
Technical Skills:
Application Security Testing, Manual Penetration Testing, DAST, SAST, Secure Code Review, Web Application Security, Vulnerability Assessment, Risk Analysis, Vulnerability Remediation, Security Reporting
Business / Domain Skills:
Experience assessing application security across enterprise web applications, digital services, and interconnected software systems to identify vulnerabilities and reduce security risks.
Experience validating application security controls, identifying exploitable weaknesses, evaluating potential business impacts, and recommending remediation aligned with organizational security requirements.
Experience supporting secure software development practices, application risk assessments, vulnerability management, and security remediation throughout the software development lifecycle.
Experience collaborating with developers, architects, and security stakeholders to communicate findings, prioritize vulnerabilities, validate corrective actions, and improve application security standards.
Communication:
Ability to communicate with technical and business stakeholders.
Documentation:
Ability to prepare project documentation, status updates, and deliverables.
Work Authorization:
Must be legally authorized to work in the United States. Sponsorship may be considered where permitted by company policy and project requirements.
Certification Required
CEH or OSCP certifications are preferred
Travel Required
None
Supervisory Role
No
Preferred Qualifications
Advanced hands-on expertise in manual penetration testing, DAST, SAST, and secure code review, with the ability to validate vulnerabilities and distinguish exploitable issues from false positives.
Strong analytical, technical documentation, and communication skills, including the ability to prepare detailed security assessment reports with proof-of-concept evidence, risk ratings, business impact, and remediation guidance.
Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or comparable application security and penetration-testing certifications are preferred but not mandatory.
Equal Employment Opportunity Statement
4Consulting, Inc is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, citizenship status, immigration status where protected by law, or any other legally protected status. All candidates will be evaluated based on job-related qualifications, experience, skills, availability, and ability to perform the essential duties of the position.
