Full-timeTech & engineering· Posted 25 Aug

Senior Application Security Analyst (VP/Hybrid)

CitiFrom company site

Salary

Not stated by the company

When

Full-time hours

Where

Singapore

Apply on company site

✨ How well do you match? Check in 10 seconds →

Free with a WorkJio account: we compare your profile with this job and show what you already meet.

Share with a friend

Start: Not stated
Work mode: On-site
Experience: Experienced

About the role

This role sits within the Chief Information Security Office's AppSec team, working with development groups to secure applications across a large enterprise. It suits someone with a development or security testing background who enjoys hands-on code review and wants to grow in information security. The team partners with Global Information Security to roll out the Secure-SDLC across the organisation.

What you'll do

Run and analyse software composition analysis scans and mobile scanning for vulnerabilities
Review and validate automated testing results, prioritising fixes based on overall risk
Perform application security tests using binary analysis
Carry out manual source code review to find security weaknesses and help mitigate them

Know someone for this? Share it

WhatsApp Telegram Facebook LinkedIn

Identify ways to automate and standardise information security controls for supported groups

Join conference calls with engineering teams to ensure proper scan coverage and effective results

Write formal security assessment reports for each application using the company's standard format

Coordinate with business and technical contacts to direct delivery of secure solutions

Work with application teams so identified vulnerabilities are remediated promptly

Manage and execute security assessments for several projects at once, meeting project timelines

Research and explore new testing tools and methodologies, and mentor junior team members

Take part in research and knowledge sharing with the broader Vulnerability Assessments organisation

Assess risk in business decisions, ensuring compliance with laws, rules, regulations and policy

Good to know

Hybrid working arrangement
Career development opportunities are provided at all stages of your career
Most of the team has achieved industry standard security certifications over time

Requirements

At least 5 years of relevant experience in web development, source code review, or application security testing
Basic understanding of application security and associated vulnerabilities
Development background in Java/J2EE, C#, .NET in an enterprise environment
Development experience with modern JavaScript frameworks, Python, JSON, Lambda
Good understanding of the Software Development Life Cycle, including unit testing and code scanning
Experience using ALM and CICD tools like Bitbucket, GitHub, Jenkins, udeploy, BMC RLM, tekton or related tools in an agile methodology

Benefits

Career development opportunities at all stages of your career
Hybrid working arrangement

Apply on the company website

You will leave WorkJio. Never pay a fee or share your Singpass password, OTP or bank log-ins to apply.

Open application

Listed from Citi’s own careers page and not yet verified by WorkJio. You apply on the company’s site. See all their roles.

Is this your company? Roles that show a salary rank higher on WorkJio. Claim or remove this listing

Senior Application Security Analyst (VP/Hybrid)

About the role

What you'll do

Good to know

Requirements

Benefits

More jobs like this

Senior Data Scientist

IT Support Specialist

IT Infrastructure Specialist

Assoc, FrontEnd Eng, WRB Tech

Assoc Director, Engineering Lead, WRB Tech

Research Associate (Semiconductor Equipment Development Senior Engineer)