🚀 We’re Hiring: Application Security Specialist / Advisor (5494)

We are looking for an experienced Application Security Specialist / Advisor to join our team! In this role, you will lead and oversee application security end-to-end across diverse technological projects, set security policies, and ensure top-tier security standards throughout the organization.

📌 Role & Responsibilities

• End-to-End Project Guidance: Lead technological projects from initiation to production, ensuring robust application security and policy implementation.
• Guidelines & Standards: Write technical guidance documents for R&D teams to enable secure coding, remediate vulnerabilities, and integrate appsec tools.
• Architecture Design: Collaborate on secure architecture design aligned with company policies and best practices.
• Vulnerability Assessment: Identify application-layer gaps, define necessary controls, and drive remediation efforts.
• Compliance & Governance: Monitor and audit compliance with regulatory guidelines (including Insurance Commissioner cyber risk regulations) and internal procedures.
• Security Assessments: Lead application security reviews, scoping documents, findings validation, and track risk mitigation.
• Tech Requirements: Define functional and security requirements for new security products and innovative technologies.

🛠️ Requirements & Qualifications

• Application Security Expertise: Deep understanding of AppSec concepts, Secure SDLC, and security methodologies.
• Cross-Functional Collaboration: Hands-on experience working closely with Software Development, DevOps, and Infrastructure teams.
• API Security: Practical experience with API Management & Security solutions (e.g., Apigee, DataPower, etc.).
• Cloud & Modern Tech: In-depth knowledge of cloud technology and cloud-native applications, focusing on Containers, Kubernetes, and Serverless architectures.
• DevSecOps & CI/CD: Hands-on experience with CI/CD pipelines, Git/Repos, and Infrastructure as Code (IaC).
• Security Tooling: Practical experience implementing SAST, DAST, SCA/OSS, CWPP, and similar security tools.
• Frameworks & Concepts: Deep familiarity with OWASP Top 10, Mobile Security, and Threat Modeling.
• Enterprise Background: Proven experience in AppSec project management, risk management, and security controls within large enterprise environments.

✨ Nice to Have / Advantages

• Certifications: CISSP, CISM, CISA, or equivalent security certifications.
• Development Background: Hands-on experience in software development/coding.
• Financial Sector Experience: Background in institutional, financial, or heavily regulated organizations.
• Regulatory Knowledge: Familiarity with financial/insurance technology regulations and compliance standards.

#JobOpening #Hiring #ApplicationSecurity #AppSec #DevSecOps #CyberSecurity #CloudSecurity #APIsecurity