Security Analyst (Web Security, IBM Appscan, OWASP, Java, NET)

Security Analyst (Web Security, IBM Appscan, OWASP, Java, NET) – Banking – Brussels

Rate: 600 – 800 per day

Duration 1-year contract

Job description

The mission of the SAST team within GSBR is to implement and operate a set of applications security controls through an automated process integrated through the clients Software Development Life Cycle/s (SDLC). We ensure that corporate policies and OWASP guidelines are uniformly applied by development teams across all business unit.

• Analyse source code using automated static analysis scanning to establish a baseline
• Correlate findings against the existing databases of known software vulnerabilities, to help identify security flaws during the development phase
• Increase the software development teams knowledge of secure coding procedures, so the organization can build security with every release
• Provide developers with guidance to understand, prioritize and remediate vulnerabilities
• Enforce production scans with a Go-Live criteria: No OWASP Top 10 vulnerabilities
• Report on key metrics on all scanned applications

We are seeking a highly motivated individual with strong code review experience. You must be self-motivated and have the experience, personality, and passion to support developers and designers.

This position is based in Brussels.

Technical Requirements

The main focus of the work will be in conducting operational activity, analysing source code findings and providing subject matter expertise to developers, using IBM Appscan Source.

Qualifications

Specific qualifications for the Security Analyst position include:

• At least 5 years of experience in IT industry
• Web application development background in .NET or Java
• Strong code review experience
• Must be able to read source codes and detect bad coding practices
• Must be able to guide developers on how to resolve/fix security issues
• Strong security knowledge using IBM Appscan Source. or similar tools (Fortify, Veracode, etc)
• Familiar with OWASP, SANS, CWE initiatives
• Knowledgeable about how security vulnerabilities can be exploited in application code by attackers and what are the coding best practices to prevent these attacks
• Experience with end-to-end application software security processes including management and remediation of findings

Qualifications

Organisational Factors

Contractors / employees are expected to achieve the mission and deliver exceptional performance for our customers and the business, with energy, focus, flexibility, and personal character. The Employee Success Factors define the behaviours that contribute to achieving those expectations. He or She will be expected to:

• Ensure compliance with established standards, policies, and performance guidelines.
• Focus on customers.
• Strive to exceed customer expectations and metrics
• Build strong relationships with customers
• Deliver Quality Results
• Stay focused, overcoming distractions and obstacles to achieve goals
• Carries out assignments with thoroughness, accuracy and attention to detail
• Act Ethically
• Act in accordance with Group’s values
• Act as a Team Player
• Develops and maintains productive working relationships with team members
• Actively shares information and expertise
• Support Change and Innovation
• Maintains a positive attitude in response to change and uncertainty
• Effectively handles shifting demands and multiple priorities
• Continually looks for ways to streamline processes, reduce costs and accomplish goals

Additional Attributes

• Experience with Software Development Life Cycle (SDLC)
• Experience using Microsoft Office suite including Word, Excel, Access, Etc.
• Experience using a Service Desk
• Skills in one of the following languages and technologies: J2EE, .NET
• Agile knowledge
• Experience of leading or managing an application software security team would be an advantage.

Please do send across to me the most up to date copy of your CV to eobiechefu@welovesalt.com 2

This job ad was posted by Salt. To find out more about Salt’s Privacy Policy and how your application is processed, please visit our website https://welovesalt.com/privacy-policy/.