Senior Application Security Analyst

Belgium·Namursenior

Security AnalystCybersecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

The selected candidate will be responsible for managing risk and

Requirements Summary

Assessing the criticality of applications and determining applicable security controls. Conducting risk analyses and monitoring agreed measures according to the established methodology.

Technical Tools

Security AnalystCybersecurity

Keystone Solutions is seeking a Senior Application Security Analyst focused on risk management for a consultancy mission at a client site. The client manages a portfolio of approximately 800 applications, including nearly 400 web applications, utilizing various technologies and providers. A lack of proper lifecycle management can lead to significant risks, including service interruptions, data compromise, and increased technical debt.

Responsibilities

~1 min read

The selected candidate will be responsible for managing risk and requirements within the Secure Application Lifecycle Management (SALM) framework. This includes:

→Assessing the criticality of applications and determining applicable security controls.
→Conducting risk analyses and monitoring agreed measures according to the established methodology.
→Defining security standards and practices for applications.
→Integrating security controls into projects and DevSecOps/CI/CD pipelines, including SAST, DAST, SCA, vulnerability scans, and penetration testing.
→Monitoring exceptions, residual risks, and recommendations prior to production deployment.
→Tracking vulnerabilities, obsolescence, and decommissioning of applications.
→Advising project teams, developers, architects, and operational staff.

Analytical mindset: Ability to structure complex situations and identify priority risks.
Pragmatism: Proposing proportionate, realistic, and verifiable measures.
Pedagogy: Making security requirements understandable for projects and business units.
Rigor: Documenting assumptions, decisions, evidence, and residual risks.
Autonomy: Managing multiple files simultaneously.
Collaboration: Working effectively with developers, architects, DevSecOps, operations, and suppliers.

What We Offer

~1 min read

As a consultant with Keystone Solutions, you will engage in dynamic projects that offer diverse challenges across various client environments. This role provides turbo-charged learning opportunities and a commitment to career growth within our framework. Being a

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

Accompagnement de projets : exigences, revues, dérogations, risques résiduels et avis de sécurité
(mandatory) - Level: T3 - Senior - Most recent: Any time
Analyse de risques applicatifs, identification des scénarios de menace et définition de mesures de traitement
(mandatory) - Level: T3 - Senior - Most recent: Any time
Communication et vulgarisation auprès des chefs de projet, architectes, développeurs, métiers et fournisseurs
(mandatory) - Level: T2 - Confirmed - Most recent: Any time
Documentation, traçabilité des décisions et utilisation d’outils de suivi ou de GRC - Level: T1 - Junior - Most recent: Any time
Méthodes de modélisation des menaces et référentiels : OWASP, STRIDE, ISO 27005, NIST SSDF, NIS2 et CyFun
(mandatory) - Level: T2 - Confirmed - Most recent: Any time