Application Security Analyst
About the role
Application security analyst provides expertise and leadership in the application security designing, implementing, evaluating, and maintaining for bank's application and system, working with CISO, various information security group, application team, developer, and business stakeholders to assess, assurance and ensure the effectiveness of the application security control.
Key responsibilities
Design and maintain application security architecture and procedures.
Perform and participate in security assessments of application currently in place to identify security gaps and recommend changes or enhancements application security control
Acts as a technical advisor and subject matter expert to internal stakeholders and partners, regarding security matters related to secure development practices, DevSecOps and another related model.
Coordinate with other information security to assist IT teams in delivering secure application solutions with his/her security recommendations and ensure key security controls are working as intended.
Develop and promote best practices for application security and secure coding guideline
Provide training, and knowledge relating application security that our development teams need
Maintain suitable knowledge of threats, risk assignment, remediation strategies, security tools, testing techniques, and security research
Maintains a working knowledge of the security capabilities of modern development languages and application design paradigms
About you
Bachelor's degree or higher in Computer Engineering, Computer Science or related fields
4+ years of experience in an application security, preferably in banking
Requires a strong background and knowledge in applications development
Strong knowledge in DevOps development, CI/CD pipelines.
Strong knowledge of application security best practice and OWASP top 10 application security risks
Familiar with common programming languages (i.e java, php, sql, python, ruby, html)
Strong understanding of industry information security standards, security and privacy frameworks
Excellent verbal & written communication skills, with the ability to assemble, document, and present technical information to leadership