Under the supervision of the CISO, the Application Security Engineer is tasked with enhancing security in application development and managing internal applications. Key responsibilities include:

• Overseeing and improving existing internal applications and their stakeholder interactions.
• Conducting project security risk assessments and vulnerability scans, including penetration testing, to ensure compliance with global security standards.
• Performing security assessments on mobile projects and APIs to safeguard against threats.
• Analyzing vulnerabilities from testing results, documenting findings, and verifying their CVE values.
• Recommending and verifying remediation solutions for identified vulnerabilities.
• Reviewing application libraries to uncover potential security flaws using advanced security methods.
• Conducting Static Application Security Testing (SAST) to identify vulnerabilities in source code and assessing the SAST tool quarterly.
• Researching new security technologies and presenting findings at team meetings.
• Coordinating project kick-offs with the development team to address potential concerns.
• Facilitating security training to educate users on protecting company data from threats.

EDUCATION :

• Bachelor’s Degree in computer science, engineering, or relevant field.

EXPERIENCE :

• At least 5 years of experience in information technology, 2 years experience in information security focusing on IT governance, network or application security.

SPECIFIC KNOWLEDGE:

• Problem Solver Mindset, Strong Project Management Knowledge with documentation, Knowledgeable in product development lifecycles.
• Knowledgeable software development lifecycles, Strong leadership and team building characteristics, Expertise and Experience in Banking and Digital Transformation projects.

BUSINESS UNDERSTANDING:

• Understanding of advanced business planning and regulatory issues. Keep abreast of technology trends, competitors’ activities, and related regulations.