Cyber Specialist/Operator

Cyber Specialist/Operator
Porto
Porto, Porto District, Portugal

Job description:

We are looking for an Application Security expert to ensure a high level of security of the applications:

- To mainly ensure that developers’ Dev
Sec
Ops activities related to SAST and SCA are done according to the security policies.

- To Identify global gaps and propose remediation strategy.

- To contribute to security frameworks improvements

Main Tasks:

• To check how developers work with Fortify and Nexus IQ: alignment with development’s lifecycle, coverage of the scans
• To check if findings are properly treated: vulnerabilities well remediated, no wrong false positive classification
• To challenge the developers, support the remediation and acculturate them with Fortify, Nexus IQ and secure coding best practices
• To develop tooling to automate as much as possible the Dev
  Sec
  Ops effectiveness controls.

Technical Skills:

• All kind of application: Business Web application, Mobile app, on prem / public cloud hosting…
• Jenkins, Bitbucket, Artifactory, Fortify, Nexus
  IQ, API REST
• For all kind of applications and languages (JAVA, JS, PHP, C#. . . )
• Application security
• SAST
• SCA
• Python scripting

Language Skills

• English
• French language is not mandatory but well appreciated

Soft Skills:

• Organizational skills
• Ability to collaborate / teamwork across multiple geographical locations
• Decision making
• Analytical ability/ Critical thinking / Attention to detail & Rigour
• Autonomy