IT Security Analyst (Middle Position)

Role Overview
We are seeking an IT security analyst with focusing on Application Security & Endpoint Security Specialist to support cybersecurity initiatives and Project alignment with Group security standards. The role will work closely with application, infrastructure, and vendor teams to track, improve security posture and ensure timely remediation of security risks.

Required Skills

• Minimum 4 years of Cyber Security experience.
• Strong knowledge of:
  o Application Security
  o Secure SDLC / DevSecOps
  o OWASP Top 10
  o Vulnerability Management
  o Endpoint Security & Hardening
  o Security Incident Response

Nice to Have

• Experience in Financial Services / Insurance industry.
• Experience working with outsourced vendors and security remediation programs.
• Familiarity with ISO27001, SOX, or Group security requirements.

Key Responsibilities

• Review and manage application security vulnerabilities from SAST, DAST, SCA, and penetration testing activities.
• Drive remediation of Critical and High vulnerabilities with development and infrastructure teams.
• Support Secure SDLC and DevSecOps security controls.
• Monitor endpoint security compliance and security baseline adherence.
• Perform vulnerability assessment, risk analysis, and remediation tracking.
• Support security audits, incident investigations, and compliance reporting