Application Security Specialist

<p><span>Key Responsibilities</span></p>
<p><span>Application Security: Conduct security assessments of web, mobile, API, and enterprise applications to identify and mitigate vulnerabilities.</span></p>
<p><span>Secure Development: Support the adoption of secure coding practices and ensure security requirements are integrated into software development activities.</span></p>
<p><span>Vulnerability Management: Track, prioritize, and support remediation of application security vulnerabilities identified through testing exercises.</span></p>
<p><span>Security Testing: Coordinate and perform application security reviews, code reviews, penetration testing, and vulnerability assessments.</span></p>
<p><span>DevSecOps Integration: Work with development and DevOps teams to embed security controls within CI/CD pipelines and release processes.</span></p>
<p><span>Risk Advisory: Provide security guidance during solution design, system implementation, and technology transformation initiatives.</span></p>
<p><span>Compliance &amp; Governance: Ensure applications comply with established security standards, regulatory requirements, and internal policies.</span></p>
<p><span>Awareness &amp; Training: Promote application security awareness across technology teams and support secure coding education initiatives.</span></p>
<p><span>Qualifications &amp; Experience</span></p>
<p><span>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related discipline.</span></p>
<p><span>Minimum of 5 years' experience in Information Security, Application Security, Secure Software Development, or a related area.</span></p>
<p><span>Good understanding of application security principles, secure development practices, and vulnerability management.</span></p>
<p><span>Experience conducting application security assessments and supporting remediation activities.</span></p>
<p><span>Knowledge of OWASP Top 10, API Security, Secure SDLC, and DevSecOps practices.</span></p>
<p><span>Relevant certifications such as CISSP, CSSLP, CEH, OSCP, CISM, or related certifications will be an advantage.</span></p>
<p><span>Experience within financial services or other highly regulated industries is desirable.</span></p>