Cyber Security Specialist/Operator Porto

Cyber Security Specialist/Operator
Porto
Porto, Porto District, Portugal

Job description:
We are looking for an Application Security expert to ensure a high level of security of the applications:
• To mainly ensure that developers’ Dev
Sec
Ops activities related to SAST and SCA are done according to the security policies.
• To Identify global gaps and propose remediation strategy.
• To contribute to security frameworks improvements
Main Tasks:
To check how developers work with Fortify and Nexus IQ: alignment with development’s lifecycle, coverage of the scans
To check if findings are properly treated: vulnerabilities well remediated, no wrong false positive classification
To challenge the developers, support the remediation and acculturate them with Fortify, Nexus IQ and secure coding best practices
To develop tooling to automate as much as possible the Dev
Sec
Ops effectiveness controls.
Technical Skills:
All kind of application: Business Web application, Mobile app, on prem / public cloud hosting…
Jenkins, Bitbucket, Artifactory, Fortify, Nexus
IQ, API REST
For all kind of applications and languages (JAVA, JS, PHP, C#. . . )
Application security
SAST
SCA
Python scripting
Language Skills
English
French language is not mandatory but well appreciated
Soft Skills:
Organizational skills
Ability to collaborate / teamwork across multiple geographical locations
Decision making
Analytical ability/ Critical thinking / Attention to detail & Rigour
Autonomy