Job Purpose:   

The Application Security Analyst provides expertise to inform and validate the secure design and development of IT applications including changes to existing applications

Job Responsibilities/ Accountabilities: 

• Ensure that application security is an embedded and critical part of the software delivery lifecycle (including during the early stages of projects) regardless of delivery methodology and tool sets used (e.g. static code analysis)
• Train and educate developers and teams in secure coding techniques including use of supporting toolsets and enable them to self service
• Perform application vulnerability assessments including regular scanning and penetration testing activities in terms of post deployment security testing on Web based, Mobile, Cloud application, Robotics, IOT etc
• Perform secure code review across a variety of programming languages
• Help tune Web Application Firewalls (WAF) and modify WAF policy to virtually patch applications where required
• Develop functional security testing scripts and procedures and identify opportunities to automate security testing and processes
• Identify inherent vulnerabilities and information security risks within systems and applications

Qualifications

Knowledge and Experience 

• A Bachelor’s degree in IT/ Computer Science/ Telecommunications/ Engineering (Electrical or Electronic) or related field from a recognized university.
• Must possess at least one professional certification such as CEH (Certified Ethical Hacker), LPT (Licensed Penetration Tester Master), OSCP (Offensive Security Certified Professional), CompTIA PenTest+, CMWAPT (Certified Mobile & Web Application Penetration Tester).
• A minimum of 5 years’ supervisory experience in Information Technology; with at least:
• 3 years’ experience in Information Security.
• Preferably 2 years Banking Experience in Active Application Security Testing
• Good knowledge of Banking/ Financial Services Operations
• Excellent planning and organizing skills
• Excellent problem analysis and attention to detail. 
• Competency: Web Application, Mobile, Cloud Application, Robotic Automation testing, IOT