Senior Analyst, Tech GRC M&A
Core
Evangelize application security strategy and ensure security is built into the Software Development Life Cycle for application modernization, DevSecOps, AI & robotics, and multi-cloud initiatives.
Role type
Senior Application Security Engineer (DevSecOps)
Builds
Secure software applications and services for global clients and partners
Domain
Technology / Application Security / DevSecOps
Required skills
Application security testing, Vulnerability assessment, DevSecOps implementation, Cloud security configuration, Agile development integration, Programming (C#, C/C++, Java, JavaScript, Python, PowerShell), API integration (REST, SOAP), Threat modeling, Risk analysis, Test automation (SAST, DAST, IAST), CI/CD pipeline management, Container security (Docker, Kubernetes)
Preferred skills
Software engineering/architecture experience, Microservices architecture design, RESTful/SOAP web services development
Technologies
C#, C/C++, Java, JavaScript, PowerShell, Python, REST, SOAP, SAST, DAST, IAST, Bitbucket, Jenkins, JIRA, Artifactory, Nexus, git, Ansible, DeMisto, Docker, Kubernetes
Responsibilities
Review and optimize security processes in Software Engineering teams, Coordinate vulnerability assessments using automated and manual tools, Provide consulting and mentoring to Developers and DevOps teams, Analyze vulnerability data to identify risks and false positives, Prepare security vulnerability and risk management reports, Deploy best practice Cloud Configuration and Security Management tools, Coordinate remediation of vulnerabilities within established timeframes
Seniority
Senior, hands-on IC
