4 дня назад
Application Security Manager (Cybersecurity)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Application Security Manager (Cybersecurity): Designing and coordinating application security practices across PSI business units with an accent on secure SDLC implementation, threat modeling, vulnerability management, and security testing. Focus on integrating SAST and DAST, securing CI/CD pipelines, managing SBOM and open-source compliance, and implementing secure application architectures.
Location: Aschaffenburg or Berlin, Germany; mobile working is available.
Company
develops software products for optimizing the flow of energy and materials for utilities and industry, combining AI methods with industrial optimization technologies.
What you will do
- Coordinate product and project security roles across business units to support secure SDLC implementation.
- Define application security measures, standards, concepts, and guidance materials.
- Select, introduce, and operate SAST and DAST solutions.
- Design threat modeling based on frameworks such as STRIDE and PASTA.
- Coordinate information security testing, vulnerability and patch management, SBOM activities, and open-source license compliance.
- Collaborate with development, operations, security, and compliance teams while promoting secure coding practices.
Requirements
- Strong understanding of web application vulnerabilities, including the OWASP Top 10, and remediation strategies.
- Experience with secure coding practices and software development methodologies.
- Experience with cloud platforms and containerization, such as Docker.
- Knowledge of security frameworks and standards, including NIST Cybersecurity Framework, OWASP Top 10, and OWASP ASVS.
- CISSP or a related security certification.
- Strong communication, analytical, problem-solving, collaboration, and continuous-learning skills.
Culture & Benefits
- Flexible working time.
- Mobile working.
- Fruit and drinks provided.
- Work in a lean and agile environment with cross-functional collaboration.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →