Associate Application Security Analyst

A security analyst role within the Global Technology Transversal Application Services (TAS) function, supporting the provision of a robust and consistent security scanning, remediation, and guidance service within the TAS Application Operations team. The team provides a global, centralized Operations, Governance, Audit, Risk & Security service across Application Delivery.

What will your essential responsibilities include

• Support the Application Operations (Security) team in all security-related activities, forums, and discussions.
• Perform application scanning across the Application Delivery estate using tools such as SonarQube, Checkmarx, JFrog Xray, CAST Highlight, Defender, and Qualys.
• Assist in setting up Jenkins pipeline integration to CI / CD lifecycle.
• Perform Static Application Security Testing (SAST) and Software Composition Analysis (SCA), including analysis of components in applications to detect vulnerabilities and compliance issues.
• Work with Application Delivery teams to communicate the outcome of scanning and analysis, and agree remediation actions including target dates for completion, in alignment with Information Security Policy requirements.
• Assist in Risk Assessments, evaluating the severity of identified vulnerabilities and prioritizing remediation efforts based on potential impact to the organization.
• Assist in Policy development, contributing to the development and implementation of vulnerability management policies and procedures.
• Manage the production of reporting and metrics to both internal and external stakeholders.
• You will report to the Head of Application Operations.

Required Skills and Abilities :

Desired Skills and Abilities :

Skills Required

Vulnerability Scanning, Application Security, Owasp, Sonarqube, Checkmarx