Application Security Analyst
The mission of the America Application Security is to protect our organization from reputational and/or financial loss resulting from a compromise of the Confidentiality, Integrity, Availability, and/or Proof of Audit of our underlying data assets. Information is protected by focusing on four categories of risk and categorizing data based on these risks. Once information assets have been classified, proper security controls are put into place to protect these assets. It is also a requirement that all critical applications must be verified to identify any security deficiencies.
Main responsibilities:
- Execute Application Security Testing (AST) program for SAR Region in collaboration with NAR AppSec: SAST, DAST, SCA.
- Execute Security Control Review (SCR) for SAR Region in collaboration with ISPL AppSec team: ASCR, ApiSRC, ISCR.
- Carry out routine (BAU) Application Security activities supported by security tools and solutions.
- Contribute to the engineering of the application security solutions.
- Work as main liaison with IT Application owners, supporting technical discussion for current vulnerabilities, non-compliances and IT project.
Position Requirements:
- Experience in Application Security.
- Bachelor’s degree in computer science or information technology.
- Excellent written and verbal English/ Portuguese communication skills.
- Clear and consistent status reporting.
- Ability to create and run secure assessments of code.
- Knowledge of Software Development Lifecycle (SDLC).
- Ability to perform risk and threat assessments.
- Knowledge of DevSecOps principles and tools.
- Knowledge of OWASP DevOps and OWASP Top 10.
- Previous experience and expertise with following tools: Fortify, Sonatype Nexus, Qualys, AppSpider, NexusIQ, Jira.
- Ability to work autonomously and focus on an end-to-end design and implementation approach.
Why join BNP Paribas?
BNP Paribas is an international bank with leading positions in the European market. It is present in more than 60 countries and employs nearly 178,000 people. The Group occupies key positions in its three main areas of operation: Domestic Markets and International Financial Services (whose retail banking and financial services network is part of Retail Banking & Services), as well as Corporate & Institutional Banking, which offers services to corporate and institutional clients.
Our presence in Brazil
BNP Paribas has been officially operating in Brazil since 1996. Since 2010, when the Securities Services area began operating, the Brazilian unit has the largest number of business lines in Latin America, making it one of the Group's largest operations in emerging markets. Today, in Brazil, the Group is present with the areas of Corporate and Institutional Banking, Asset Management, Insurance (Cardif) and Fleet Management (Arval).
Currently, the BNP Paribas Group has around 1400 employees in the country. In Brazil, it is among the largest international investment banks in total assets (R$ 112.5 billion, Jun/23, Prudential Conglomerate, Central Bank), offering a diversity of products and multiple solutions to its clients.
BNP Paribas is committed to providing a work environment that fosters diversity, inclusion, and equal employment opportunity without regard to race, color, gender, age, creed, sex, religion, national origin, disability (physical or mental), marital status, citizenship, ancestry, sexual orientation, gender identity and gender expression, or any other legally protected status.
