Medior Application Security Analyst

Keystone Solutions is seeking a Medior Application Security Analyst focused on risk management for a consultancy mission at a client site. The client manages a portfolio of approximately 800 applications, including nearly 400 web applications, utilizing various technologies and providers. A lack of proper lifecycle management can lead to significant risks, including service interruptions, data compromise, and increased technical debt.

As a consultant, you will be responsible for:

• →Taking charge of the risk and requirement aspects of the Secure Application Lifecycle Management (SALM) process.
• →Supporting projects from initial qualification to production, ensuring that controls align with application criticality and decision traceability.
• →Collecting relevant information to assess application criticality and determining applicable SALM pathways and controls.
• →Conducting or assisting in risk analyses and threat modeling according to established methodologies.
• →Participating in architecture, design, and flow reviews, defining and verifying application security requirements.
• →Advising project managers, architects, developers, and stakeholders on security measures.
• →Consolidating security documentation and preparing SALM advisories.
• →Contributing to continuous improvement by developing standards, checklists, and SALM experience feedback.

The ideal candidate will possess:

• Strong analytical skills to structure complex situations and identify priority risks.
• Pragmatism in proposing realistic and verifiable measures.
• Pedagogical skills to make security requirements understandable to projects and stakeholders.
• Attention to detail in documenting assumptions, decisions, evidence, and residual risks.
• Autonomy in managing multiple cases simultaneously.
• Collaboration skills to work effectively with developers, architects, and service providers.

At Keystone Solutions, we pride ourselves on our consultancy nature, focusing on on-site work and the consultant identity. You will engage in dynamic projects, facing diverse challenges across various client environments. Our commitment to turbo-charged learning ensures that you will experience professional development and broad learning opportunities. As a

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

• Accompagnement de projets : exigences, revues, dérogations, risques résiduels et avis de sécurité
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Analyse de risques applicatifs, identification des scénarios de menace et définition de mesures de traitement
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Communication et vulgarisation auprès des chefs de projet, architectes, développeurs, métiers et fournisseurs
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Documentation, traçabilité des décisions et utilisation d’outils de suivi ou de GRC
• (mandatory) - Level: T1 - Junior - Most recent: Any time
• Méthodes de modélisation des menaces et référentiels : OWASP, STRIDE, ISO 27005, NIST SSDF, NIS2 et CyFun
• (mandatory) - Level: T1 - Junior - Most recent: Any time

French
(mandatory)
Level Proficiency (C2)