Cyber Security Spec IV (AppSec)
Core
Advanced Application Security consultant driving DevSecOps integration, security testing, and incident response for a global bank's digital defense model.
Role type
Senior Application Security Engineer (AppSec)
Builds
Secure CI/CD pipelines, secure microservices/APIs, and resilient cloud-native applications
Domain
Banking / Cybersecurity
Required skills
DevSecOps (SAST, DAST, SCA, IaC, CI/CD), Security Architecture (APIs, Microservices, Containers), Security Testing (Static, Dynamic, Interactive, Threat Modeling), Incident Response & Forensics, Cryptography & Access Control, Mobile Security, SDLC/SSDLC Integration
Preferred skills
Red Team & Blue Team exercises, MITRE ATT&CK, AI/ML for Security, Data Security (Databricks, ML pipelines), Reverse Engineering, LLMs for Security
Technologies
GitHub Actions, SAST/DAST/IAST tools, Container Security, Multi-cloud environments, Mobile Security frameworks
Responsibilities
Lead DevSecOps processes and integrate security into the SDLC; Conduct security testing including code reviews and threat modeling; Define and review security architecture for complex applications and APIs; Respond to security incidents including forensic analysis; Coordinate Red Team vs. Blue Team simulations; Support Protect and Detect services; Evaluate security maturity of controls; Drive adoption of new security technologies and automations.
Seniority
Senior, hands-on IC