Full-Time Application and Security Management Analyst

• Collaborate with technical and business teams to address security flaws and implement remediation plans.
• Oversee application security tasks, ensuring alignment with audit requirements and internal policies.
• Support change and incident management processes, with a focus on high-priority incidents (P1 & P2).
• Provide guidance to development and support teams on security-related ticket requirements and process expectations, ensuring SLA compliance.
• Act as a liaison with internal stakeholders to ensure clear communication and quality engagements.
• Support governance and administrative functions, including audit preparation and policy development.
• Compile and deliver regular reports, including weekly, monthly, and OSM-specific security metrics.

• Application Security & Vulnerability Management: Familiarity with CVSS, tools like OWASP ZAP, Veracode, Rapid7 (on-prem), and Wiz.IO (cloud vulnerability management and CSPM). Track and assist in the closure of identified vulnerabilities, working closely with IT and Development teams. Review and maintain secure configurations.
• Security Fundamentals: Working knowledge of encryption, authentication, and secure data transmission. Knowledge of network security principles and firewall configurations. Familiarity with SSO and MFA using OKTA, and directory services such as MS Active Directory. Experience with CyberArk PAM for privileged access management.
• Security Information and Event Management (SIEM): Use of Splunk SIEM for real-time threat detection and log analysis. Review and optimise SIEM use cases.
• Monitoring & Endpoint Security: Experience with Tanium and MS Defender for server and endpoint security management. Familiarity with IBM Guardium. Exposure to Cyera.
• Cloud & Infrastructure Security: Experience with Wiz.IO for CSPM and IaC scanning. Understanding of secrets management. Familiarity with Thales and AWS KMS/HSM for key management.
• Other Tools & Platforms: Knowledge of SailPoint, CyCognito, Imperva, ProofPoint, MS Office365 Message Security, 1Password, Netwrix.

What is the last date for applying to the job?

Which countries are accepted for this remote job?