Application Security Analyst

About the role

Application security analyst provides expertise and leadership in the application security designing, implementing, evaluating, and maintaining for bank's application and system, working with CISO, various information security group, application team, developer, and business stakeholders to assess, assurance and ensure the effectiveness of the application security control.

Key responsibilities

• Design and maintain application security architecture and procedures.
• Perform and participate in security assessments of application currently in place to identify security gaps and recommend changes or enhancements application security control
• Acts as a technical advisor and subject matter expert to internal stakeholders and partners, regarding security matters related to secure development practices, DevSecOps and another related model.
• Coordinate with other information security to assist IT teams in delivering secure application solutions with his/her security recommendations and ensure key security controls are working as intended.
• Develop and promote best practices for application security and secure coding guideline
• Provide training, and knowledge relating application security that our development teams need
• Maintain suitable knowledge of threats, risk assignment, remediation strategies, security tools, testing techniques, and security research
• Maintains a working knowledge of the security capabilities of modern development languages and application design paradigms

About you

• Bachelor's degree or higher in Computer Engineering, Computer Science or related fields
• 4+ years of experience in an application security, preferably in banking
• Requires a strong background and knowledge in applications development
• Strong knowledge in DevOps development, CI/CD pipelines.
• Strong knowledge of application security best practice and OWASP top 10 application security risks
• Familiar with common programming languages (i.e java, php, sql, python, ruby, html)
• Strong understanding of industry information security standards, security and privacy frameworks
• Excellent verbal & written communication skills, with the ability to assemble, document, and present technical information to leadership