• Provide subject-matter expertise in web application security, advising teams on secure design, testing strategy, and risk mitigation.
• Perform advanced manual and automated web application penetration testing on internally developed applications to identify, validate, and prioritize security vulnerabilities.
• Contribute to the design, rollout, and continuous improvement of the internal penetration testing program.
• Standardize penetration testing methods, documentation, workflows, reporting templates, and scoping guidelines.
• Lead pre-engagement scoping sessions and collaborate with product teams to understand application architecture, functionality, and workflows.
• Deliver clear, actionable findings and effectively communicate vulnerabilities to developers with varying security skill levels.
• Partner with development teams to remediate issues, track findings, retest fixes, and ensure proper closure of vulnerabilities.
• Stay current on emerging exploitation techniques, vulnerabilities, and defensive controls.
• Support security incident investigations by documenting findings and evaluating the scope and impact of breaches to enable effective remediation and recovery.
• Provide strategic guidance and technical expertise to design solutions that address identified security gaps, ensuring recommendations align with organizational goals and strengthen overall security posture.
• Strictly adheres to Liberty University policies, representing the University in an exemplary manner.
• Works effectively as a team member, embracing and fostering LU’s Christian model and Mission – Training Champions for Christ.

• 20%: Develop/Lead penetration testing practice for IT security at Liberty University
• 15%: Investigate and document security breaches; assess the damage they cause
• 10%: Help design and architect solutions to identify security gaps
• 10%: Provide strategic guidance for IT security technology implementation
• 10%: Support a risk and opportunity-based approach to security services to optimize business outcomes
• 10%: Assist and empower stakeholders to design and implement information security controls to meet control intent where no existing control or design patterns exist
• 10%: Consult with department directors and management regarding security incidents
• 10%: Drive security efficiency and capacity increases
• 5%: Collaborate with different key stakeholders/departments on project implementation

• A Bachelor's degree in Computer Science, Information Security, Information Systems, or related field required.
• 3-5 years' relevant security experience and fluency with at least one and experience with another of the following required: JavaScript, HTML, Python, Java, C#, PowerShell.
• Experience working with any/all of the following security technologies: penetration testing tools, network traffic analysis (NTA), security information event management (SIEM), network vulnerability scanners, web application firewalls (WAF), web application scanners (WAS), domain name service (DNS) security, data loss prevention (DLP), endpoint detection and response (EDR), email security, shared storage security, security orchestration, automation and response (SOAR), intrusion protection/detection systems (IPS/IDS).
• Preferred qualifications: GIAC technical certifications (GWAPT/GPEN/GRTP), CompTIA technical certifications (Security+/CySA+/PenTest+), Cloud certifications, experience with penetration testing, intrusion detection, vulnerability scanning, system integration, and poly-nimbus security concepts.

• Ability to effectively communicate both verbally and in writing to convey clear, well articulated information.
• Ability to understand, speak, and write English in order to convey messages and correspond in an articulate and professional manner.
• Possess public communication skills that allow professional representation of Liberty University.
• Strong organizational skills.
• Computer skills.

Problem Solving

• Intuitively able to reason, analyze information and events, and apply judgment in order to solve problems of both a routine and complex nature.

• May be required to travel.

• May be required to sit to perform deskwork or type on a keyboard.
• Regularly required to hear and speak in order to effectively communicate orally.
• Regularly required to stand, walk, and climb stairs to move about the campus.
• Handle materials, reach overhead, kneel or stoop in order to conduct business.
• Regularly lift 10 or fewer pounds.

This is a home-based work position. Employee’s home work environment must be free ofdistractions and arranged to maximize Employee’s efficiency in performing work tasks andmust include a reliable, high-speed internet connection. Effective communication both verbally and in writing. Ability to intuitively reason, analyze information and events, and apply judgment in order to solve problems of both a routine and complex nature. Excellent computer and organizational skills.

If the employee is required to travel in performing the duties and responsibilities of the position, the use of one’s personal vehicle (or LU vehicles) may be required for travel. Proof of a valid driver’s license, an acceptable DMV record, LU Driving Approval, and liability insurance is required when driving in the performance of the employee’s position.

#LI-DNI

Time Type

Location

Pay Range

Compensation is determined based on factors such as qualifications, experience, education, skills, and certifications, along with University needs and external market conditions. Market benchmarks may be used, as appropriate, in combination with internal equity to ensure pay is fair and aligned with the broader compensation structure.

The position may also be eligible for comprehensive benefits, including health insurance, retirement plans, and tuition assistance.