Security Analyst (CXM)

What you'll do

• Help teams build and maintain secure applications and products
• Support day-to-day security activities across secure development processes, security testing, penetration testing, vulnerability management, and secure architecture
• Assess current and new products against security requirements
• Support risk management activities
• Drive remediation of identified weaknesses and vulnerabilities
• Work closely with Product, DevOps, Cyber Operations, Security Architecture, Project, Pen Testing and Risk teams
• Embed security early in the software development lifecycle
• Manage stakeholders effectively
• Drive practical security outcomes

Requirements

• Conduct product security assessments for existing and new products
• Review products against defined security requirements
• Partner with Product and DevOps teams to prioritise and support remediation plans
• Assist with risk management process and technical risk assessment
• Work with Cyber Operations team to ensure vulnerabilities are raised and remediated
• Ensure third-party security assessments are completed as required
• Collaborate with Security function teams including Cyber Operations, Security Architecture, Pen Testing and Risk
• Build strong working relationships with business and development stakeholders
• Apply knowledge of secure software development and SDLC
• Support embedding security early in the lifecycle with guidance on secure design and coding practices
• Respond to client RFIs and support due diligence activities
• Analyze issues from multiple perspectives to drive effective outcomes
• Familiarity with Wiz is highly beneficial
• Knowledge of code repositories and security tooling such as GitHub, GitLab, Bitbucket
• Experience with OneTrust is a plus
• Understanding of cloud infrastructure across AWS, Azure, or GCP
• Security-related certifications or training such as CompTIA Security+, CISM, or Network+ are a plus

Tech stack

Benefits