IT Application Security Specialist

About the role

The IT Application Security Specialist will lead the design, implementation, and governance of application security across the enterprise. You will embed security into the Software Development Lifecycle, drive DevSecOps practices, and ensure secure architecture for cloud, on‑premise, and hybrid solutions.

Key responsibilities

• Develop and maintain an enterprise‑wide Application Security program, defining secure‑by‑design principles and security metrics.
• Design and review secure architectures for applications, APIs, and micro‑services, and lead threat‑modeling activities.
• Integrate security controls into CI/CD pipelines, manage SAST, DAST, and SCA tools, and enforce OWASP Top 10 coding standards.
• Implement secure cloud architectures on AWS and/or Azure, enforce IAM and Zero Trust, and secure container platforms such as Kubernetes and OpenShift.
• Coordinate vulnerability assessments, penetration testing, and ensure timely remediation of findings.
• Collaborate with SOC teams to enhance monitoring, SIEM use‑case development, and incident response.
• Ensure compliance with PCI DSS, SWIFT CSP, ISO 27001 and support audit activities.
• Provide guidance, training, and awareness on secure coding to development and DevOps teams.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering or related field.
• 8–12 years of experience in cybersecurity, with a focus on application security.
• Proven track record of implementing security in SDLC and DevSecOps environments.
• Strong understanding of regulatory standards such as PCI DSS, ISO 27001, and SWIFT CSP.

Required skills

• SAST, DAST, SCA
• OWASP Top 10
• STRIDE threat‑modeling
• AWS, Azure
• Kubernetes, OpenShift
• CI/CD pipelines
• IAM, Zero Trust
• SIEM, SOC integration
• PCI DSS, SWIFT CSP, ISO 27001