Cyber Security Specialist/Operator

Job description:

We are looking for an Application Security expert to ensure a high level of security of the applications:

• To mainly ensure that developers’ DevSecOps activities related to SAST and SCA are done according to the security policies;

• To Identify global gaps and propose remediation strategy;

• To contribute to security frameworks improvements.                                                                                                                                                           

Main Tasks:

• Check how developers work with Fortify and Nexus IQ: alignment with development’s lifecycle, coverage of the scans;
• Check if findings are properly treated (vulnerabilities well remediated, no wrong false positive classification);
• Challenge the developers, support the remediation and acculturate them with Fortify, Nexus IQ and secure coding best practices;
• Develop tooling to automate as much as possible the DevSecOps effectiveness controls.

Technical Skills:

• All kind of application: Business Web application, Mobile app, on prem / public cloud hosting…;
• Jenkins, Bitbucket, Artifactory, Fortify, NexusIQ, API REST;
• For all kind of applications and languages (JAVA, JS, PHP, C#...);
• Application security;
• SAST;
• SCA;
• Python scripting.                                   

Language Skills

• English