Application Security Manager (f/m/d)

Diesen Job teilen!

• Communicate technical information to both technical and non-technical stakeholders, including senior leadership and customers

• Enable and support product-specific application security roles across our various business units

• Coordinate, align, track and steer business unit specific product and project security roles to achieve secure SDLC implementation across PSI

• Form a community and foster knowledge exchange, provide guidance, feedback, training and professional development opportunities to the business unit application security roles

• Collaborate with cross-functional teams, including development, operations, security, and compliance, to ensure effective communication of security risks and recommendations

• Define and implement application security measures

• Design secure SDLC and create corresponding concepts, standards and guidance materials

• Select, introduce and operate SAST and DAST

• Design Threat Modelling using industry frameworks like STRIDE or PASTA and implement together with Product Security Officer

• Coordinate information security test management

• Ensure security across CI/CD pipelines and practices

• Application vulnerability and patch management incl. SBOM

• Ensure usage and compliance to open-source software licenses

• Promote secure coding practices and educate developers on the importance of security in software development

• Design and implement secure application architectures that align with organizational security policies and standards

• Strong understanding of web application vulnerabilities (e.g., OWASP Top 10) and remediation strategies

• Proficiency in secure coding practices and development methodologies

• Experience with cloud-based platforms and containerization (e.g., Docker)

• Knowledge of security frameworks and standards (e.g., NIST Cybersecurity Framework, OWAS Top10, OWASP ASVS)

• CISSP, or related security certifications

• Great enthusiasm for Information Security

• Intrinsic motivation, never ending curiosity

• Quick thinking and continuous learning personality and thus are able to dive into new topics quickly, filter and digest the relevant information

• Inquisitive and analytical mindset

• Strong problem-solving and analytical abilities

• Excellent communication skills verbal and written, clear and to the point

• Proactivity driver attitude happy to collaborate with others

• Ability to work comfortably in a lean and agile environment