Responsibilities:
- Be the subject matter expert in application security domain, IT security technologies and solutions
- Implement security best practices within software development lifecycle and collaborate with development teams to ensure secure coding practices and threat modelling.
- Performing information risk assessments for new/existing projects, IT outsourcing security reviews, and 3rd party risk assessments as identified across all aspects of the information technology structure.
- Provide security consultations to internal customers by identifying possible security threats and determining the best security measures.
- Respond to security incidents and provide technical guidance on remediation.
- Stay up-to-date with the latest security trends and technologies.
- Communicate security risks and recommendations to technical and non-technical stakeholders.
Qualifications:
- Bachelor's degree in Computer Science, Information Security, or a related field.
- 3+ years of experience in application security.
- At least proficient in 1 Object-oriented programming
- Strong knowledge of software development and security practices.
- Familiarity with security standards such as OWASP, PCI DSS, and ISO 27001.
- Familiarity with MAS TRM.
- Excellent communication and interpersonal skills.
- Strong analytical and problem-solving skills.
- Certifications in CISSP, CSSLP, OSCP, CISA or CEH.