Security Threat Analyst II Salary in the United States

The Security Threat Analyst II conducts manual and automated penetration tests including black-box, gray-box, and white-box. Performs penetration testing to assess and identify security vulnerabilities of networks, applications, and systems. Being a Security Threat Analyst II documents testing results and presents suggestions for the development of countermeasures, security improvements, and mitigation strategies. Evaluates findings and performs root cause analysis to identify weaknesses, misconfigurations, or other flaws in the environment that could lead to security compromises. In addition, Security Threat Analyst II utilizes a variety of assessment tools, such as Nmap, BurpSuite, Kali Linux and scripting languages like Bash, Python, Perl, or Ruby. Familiar with red team testing protocols and cybersecurity frameworks like OWASP, OSSTMM and PTES. Stays up to date with the latest security threats, techniques, and tools to continuously improve penetration testing methodologies. Typically requires a bachelor's degree in computer science. May require GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), and/or Offensive Security Certified Professional (OSCP) certificate. Typically reports to a manager. Being a Security Threat Analyst II occasionally directed in several aspects of the work. Gaining exposure to some of the complex tasks within the job function. Working as a Security Threat Analyst II typically requires 2-4 years of related experience. (Copyright 2024 Salary.com)

Employers: Job Description Management Tool