Application Security Analyst

DHL eCommerce

Posted 1mo ago

The employer’s full description could not be read from their board. This is a summary of the posting — follow the apply link for the original.

Review and advise on security architecture of systems, applications and infrastructure
Document and improve security and DevSecOps procedures
Assess the results of security test reports
Document test results and remaining risks in GRC tool
Present test results and risks to management
Amalgamate industry best practices into security solutions
Assist developers with remediation of findings
Support the creation of application security concepts
Perform security reviews
Assist in review and security assessments of AI solutions
Support security audits and security testing
Support risk management process
Support vulnerability management process

Knowledge of OWASP Top 10 and ASVS frameworks
Experience with cloud security and AI security standards
Ability to interpret different coding languages incl. python, Java, ReAct and JavaScript
Excellent organizational and analytical skills
Ability to analyze data, draw conclusions, interpret results, and make recommendations
Ability to communicate effectively with all levels of management
Ability to work effectively in a global environment
Ability to produce high quality work under pressure or tight deadlines
Good written, oral, and interpersonal communication skills
Strong Microsoft Office skills (Word, Excel, PowerPoint)
Strong attention to detail
Ability to multi-task
3+ years of experience in application security, DevSecOps or security architecture
Experience with best practices and tools in API security, container security, modern identity frameworks and supply chain security
Knowledge of most common SAST, DAST and penetration testing tools and procedures
Experience with CVSS, risk management and GRC tools
Experience and knowledge of Microsoft Office (Word, Excel, PowerPoint)

Process automation experience preferred
Experience working with a global organization and/or interacting with colleagues in foreign jurisdictions
Security certifications such as CISSP, CISA, CEH, OSCP or CCSP are preferred

Skills