Essential Responsibilities
- Support the Application Operations (Security) team in all security related activities, forums and discussions.
- Perform application scanning across the Application Delivery estate using tools such as SonarQube, Checkmarx, JFrog Xray, CAST Highlight, Defender and Qualys.
- Assist in setting up Jenkins pipeline integration to CI / CD lifecycle.
- Perform Static Application Security Testing (SAST) and Software Composition Analysis (SCA), including analysis of components in applications to detect vulnerabilities and compliance issues.
- Work with Application Delivery teams to communicate the outcome of scanning and analysis, and agree remediation actions including target dates for completion, in alignment with Information Security Policy requirements.
- Assist in Risk Assessments, evaluating the severity of identified vulnerabilities and prioritizing remediation efforts based on potential impact to the organization.
- Assist in Policy development, contributing to the development and implementation of vulnerability management policies and procedures.
- Manage the production of reporting and metrics to both internal and external stakeholders.
- You will report to the Head of Application Operations.
Required Skills and Abilities :
Security First mindset.Understanding of vulnerability analysis, scanning and remediation processes.Understanding of CVEs, CVSS.Understanding of security industry compliancy benchmarks and standards i.e. CIS.Understanding of security best practices / standards i.e. OWASP, NIST.Preferable experience with at least 2 coding languages i.e. Java, .NET, C++, Python etc.Desired Skills and Abilities :
Outstanding analytical, critical thinking and organizational skills, ability to multitask and work to deadlines.Proficiency in Power BI, MS Work and MS Excel : We maintain and continually develop a number of Power BI Dashboards to support provision of critical data and use Excel to support our data capture and analysis and reporting.Excellent communication, interpersonal and relationship building skills (verbal and written).Skills Required
Application Security, Owasp, Sonarqube, Checkmarx, C++, .NET, Python