Lensys MarketplaceMissions
Lensys
Suivez-nous

Senior Application Security Analyst

As a Senior Application Security Analyst, you will be at the forefront of securing a vast digital application ecosystem, embedding security directly into development pipelines. You will leverage cutting-edge tools to identify, qualify, and assist in the remediation of vulnerabilities, driving the shift towards automated and standardized security practices.

CONTEXT

In an increasingly interconnected world, the security of digital applications is paramount, especially when those applications underpin critical services. Our client, a major player in its sector, manages a sprawling portfolio of nearly 800 applications, each vital to their operations and the broader community they serve. They are on a mission to revolutionize their approach to application security, moving away from reactive, manual checks to a proactive, automated, and deeply integrated Secure Application Lifecycle Management (SALM) framework. This transformation requires not just vigilance but technical prowess and a passion for DevSecOps. You will join a dedicated team within the Security Pole, acting as a pivotal technical expert, whose work directly contributes to safeguarding digital assets and ensuring the resilience of essential services. This is an opportunity to leave a tangible mark on a critical security initiative.

ACTIVITIES

  • Manage and optimize technical security controls across a large portfolio of applications, ensuring robust protection.
  • Integrate automated security testing tools (SAST, DAST, SCA) and vulnerability scanners into existing DevSecOps and CI/CD pipelines.
  • Perform in-depth qualification and triage of identified vulnerabilities, assessing their severity and potential impact.
  • Collaborate closely with development teams, providing expert technical guidance and support for vulnerability correction and secure coding practices.
  • Contribute to the automation and standardization of application security processes throughout the entire software development lifecycle.
  • Participate in security reviews, threat modeling, and architectural assessments for new and existing applications.
  • Stay abreast of the latest application security threats, trends, and mitigation techniques.

EXPECTED ACHIEVEMENTS

  • Successfully integrate and operationalize advanced security tooling within the DevSecOps pipelines, increasing automation and coverage.
  • Significantly reduce the time-to-detection and time-to-remediation for critical application vulnerabilities.
  • Empower development teams with the knowledge and tools to write more secure code, acting as a trusted security advisor.
  • Contribute directly to the maturity of the Secure Application Lifecycle Management (SALM) program, shifting the organization away from ad-hoc security measures.
  • Enhance the overall security posture of the application portfolio, mitigating risks and improving compliance.
  • Establish clear, repeatable processes for vulnerability management and technical support, fostering a more secure development culture.

ENVIRONMENT

  • Methodologies: DevSecOps, Agile (Scrum/Kanban), Secure Application Lifecycle Management (SALM).
  • Tools/Technologies: SAST (e.g., SonarQube, Checkmarx), DAST (e.g., OWASP ZAP, Burp Suite), SCA (e.g., Snyk, Mend), Vulnerability Scanners, CI/CD platforms (e.g., Azure DevOps, GitLab CI, Jenkins), Containerization (Docker, Kubernetes), Cloud platforms (Azure preferred), Jira, Confluence.
  • Standards: OWASP Top 10, CWE, MITRE ATT&CK.
  • Programming Languages: Various, depending on application portfolio (e.g., Java, .NET, Python).