Senior Application Security Analyst

Belgium·Namursenior

Security AnalystCybersecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

As a consultant representing Keystone Solutions,

Requirements Summary

exploitabilité, impact, faux positifs et priorisation (mandatory) - Level: T3 - Senior - Most recent: Any time Architecture et sécurité applicative : flux, authentification, autorisation, chiffrement,

Technical Tools

Security AnalystCybersecurity

Keystone Solutions is seeking a Senior Application Security Analyst with a technical orientation and DevSecOps expertise for a consultancy mission at a client site. The client manages a portfolio of approximately 800 applications, including nearly 400 web applications, utilizing various technologies and providers. A lack of mastery over their lifecycle can lead to significant risks, including service interruptions, data compromises, and increased technical debt.

Responsibilities

~1 min read

As a consultant representing Keystone Solutions, you will be responsible for:

→Managing technical controls for Secure Application Lifecycle Management (SALM) and integrating them into development practices.
→Utilizing results from tools to qualify vulnerabilities, assist in their remediation, and contribute to the automation of controls in CI/CD pipelines.
→Determining application criticality and applicable security controls.
→Conducting risk analyses and monitoring measures according to established methodologies.
→Defining application security standards and practices.
→Integrating security controls into DevSecOps/CI/CD projects, including SAST, DAST, SCA, vulnerability scans, and penetration testing.
→Monitoring exceptions, residual risks, and recommendations prior to production deployment.
→Advising project, development, architecture, and operations teams.

Technical rigor: reproduce, qualify, and document findings.
Pragmatism: prioritize exploitable vulnerabilities and propose realistic corrections.
Pedagogy: explain vulnerabilities and remediations to developers.
Curiosity: keep knowledge updated on attack techniques and tools.
Autonomy: configure and operate controls while escalating complex cases.
Collaboration: work with projects, developers, DevSecOps, SecOps, and providers.

What We Offer

~1 min read

As a consultant at Keystone Solutions, you will experience:

✓Consultancy Nature: Focus on on-site work and embodying the consultant identity.

✓Dynamic Projects: Engage with diverse challenges across various client environments.

✓Turbo-Charged Learning: Benefit from professional development and broad learning experiences.

✓Skyrocketing Ambition: Enjoy a commitment to career growth within our framework.

✓Values: Being a "K-Stone" means bringing our core values to every engagement.

Analyse et qualification des vulnérabilités : exploitabilité, impact, faux positifs et priorisation
(mandatory) - Level: T3 - Senior - Most recent: Any time
Architecture et sécurité applicative : flux, authentification, autorisation, chiffrement, API et dépendances
(mandatory) - Level: T2 - Confirmed - Most recent: Any time
Chaînes CI/CD et pratiques DevSecOps : intégration, paramétrage, automatisation et quality gates
(mandatory) - Level: T3 - Senior - Most recent: Any time
Outils de sécurité applicative : SAST, DAST, SCA, détection de secrets et scans de vulnérabilités
(mandatory) - Level: T2 - Confirmed - Most recent: Any time
Référentiels techniques : OWASP Top 10, ASVS, SAMM, CWE, CVSS et NIST SSDF
(mandatory) - Level: T2 - Confirmed - Most recent: Any time
Restitution technique, documentation et accompagnement des équipes de développement
(mandatory) - Level: T2 - Confirmed - Most recent: Any time
Sécurité du développement, API, dépendances logicielles, conteneurs et gestion des secrets
(mandatory) - Level: T2 - Confirmed - Most recent: Any time