Medior Application Security Analyst
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
Mission Overview
Keystone Solutions is seeking a Medior Application Security Analyst focused on risk management for a consultancy mission at a client site. The client manages a portfolio of approximately 800 applications, including nearly 400 web applications, utilizing various technologies and providers. A lack of proper lifecycle management can lead to significant risks, including service interruptions, data compromise, and increased technical debt.
Key Responsibilities
- Taking charge of the risk and requirement aspects of the Secure Application Lifecycle Management (SALM) process.
- Supporting projects from initial qualification to production, ensuring that controls align with application criticality and decision traceability.
- Collecting relevant information to assess application criticality and determining applicable SALM pathways and controls.
- Conducting or assisting in risk analyses and threat modeling according to established methodologies.
- Participating in architecture, design, and flow reviews, defining and verifying application security requirements.
- Advising project managers, architects, developers, and stakeholders on security measures.
- Consolidating security documentation and preparing SALM advisories.
- Contributing to continuous improvement by developing standards, checklists, and SALM experience feedback.
Required Skills
- Strong analytical skills to structure complex situations and identify priority risks.
- Pragmatism in proposing realistic and verifiable measures.
- Pedagogical skills to make security requirements understandable to projects and stakeholders.
- Attention to detail in documenting assumptions, decisions, evidence, and residual risks.
- Autonomy in managing multiple cases simultaneously.
- Collaboration skills to work effectively with developers, architects, and service providers.
At Keystone Solutions, we pride ourselves on our consultancy nature, focusing on on-site work and the consultant identity. You will engage in dynamic projects, facing diverse challenges across various client environments. Our commitment to turbo-charged learning ensures that you will experience professional development and broad learning opportunities.
Duration
04/01/2027 - 03/01/2028 12 months (full time)
Skills required
- Accompagnement de projets : exigences, revues, dérogations, risques résiduels et avis de sécurité
- (mandatory) - Level: T2 - Confirmed - Most recent: Any time
- Analyse de risques applicatifs, identification des scénarios de menace et définition de mesures de traitement
- (mandatory) - Level: T2 - Confirmed - Most recent: Any time
- Communication et vulgarisation auprès des chefs de projet, architectes, développeurs, métiers et fournisseurs
- (mandatory) - Level: T2 - Confirmed - Most recent: Any time
- Documentation, traçabilité des décisions et utilisation d’outils de suivi ou de GRC
- (mandatory) - Level: T1 - Junior - Most recent: Any time
- Méthodes de modélisation des menaces et référentiels : OWASP, STRIDE, ISO 27005, NIST SSDF, NIS2 et CyFun
- (mandatory) - Level: T1 - Junior - Most recent: Any time
Language requirements
French (mandatory) Level Proficiency (C2)