IT Application Security Specialist

About the role

The Application Security Specialist will design, implement and govern security across the enterprise’s applications. You will embed security into the Software Development Lifecycle, drive DevSecOps practices and ensure compliance with regulatory standards.

Key responsibilities

• Develop and maintain an enterprise Application Security program, defining secure‑by‑design principles and security metrics.
• Design and review secure architectures for applications, APIs and micro‑services, leading threat‑modeling activities (e.g., STRIDE).
• Integrate security controls into CI/CD pipelines and manage application security testing tools (SAST, DAST, SCA).
• Establish secure coding standards aligned with the OWASP Top 10 and automate security validation.
• Design secure cloud architectures on AWS and/or Azure, enforce IAM and Zero‑Trust principles, and secure container platforms (Kubernetes/OpenShift).
• Coordinate vulnerability assessments, penetration testing and ensure timely remediation.
• Collaborate with SOC teams to enhance monitoring, SIEM use‑case development and incident response.
• Ensure adherence to standards such as PCI DSS, SWIFT CSP and ISO 27001, supporting audits and regulatory assessments.
• Provide guidance, training and awareness on secure coding to development and DevOps teams.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering or a related field.
• 8–12 years of experience in cybersecurity, with a focus on application security.
• Proven ability to lead security initiatives across cloud, on‑premises and hybrid environments.

Required skills

• SAST, DAST, SCA tools
• OWASP Top 10 secure coding standards
• STRIDE threat‑modeling methodology
• AWS and Azure cloud platforms
• Kubernetes and OpenShift container orchestration
• CI/CD pipeline integration
• IAM and Zero‑Trust security models
• SIEM integration and use‑case development
• PCI DSS, SWIFT CSP, ISO 27001 compliance