Application Security Analyst

DHL eCommerce

4d•$63,300 - $101,100•Hybrid

About The Position

The Application Security Analyst is responsible for ensuring the security of homegrown and 3rd party applications. The role emphasizes analytical and advisory responsibilities rather than hands-on implementation, supporting secure architecture practices, overseeing the security posture of applications (including cloud and AI solutions), and providing transparency to IT management through status reporting and risk insights. The Application Security Analyst assesses and advises on security architecture and configuration of systems, applications and infrastructure. The role also collaborates with the DevSecOps team on state-of-the-art procedures. The position also independently assesses the results of security test reports like static code analysis, dynamic application analysis and penetration testing and supports development teams with the mitigation of findings. This position works within a fast paced, agile environment collaborating with business and technology teams across the Americas region to implement and support next generation security solutions.

Requirements

Knowledge of OWASP Top 10 and ASVS frameworks including best practice implementations.
Experience with cloud security and AI security standards (e.g. ISO 27017, CSA CCM, NIST AI RMF, ISO 42001) and best practices.
Ability to interpret different coding languages incl. python, Java, ReAct and JavaScript as well as further widespread languages.
Excellent organizational and analytical skills.
Must be able to analyze data, draw conclusions, interpret results, and make recommendations with respect to various IT systems.
Ability to communicate effectively with all levels of management.
Ability to work effectively in a global environment, including awareness of and sensitivity to cultural differences.
Ability to produce high quality work under pressure or tight deadlines.
Good written, oral, and interpersonal communication skills.
Strong Microsoft Office skills (Word, Excel, PowerPoint).
Strong attention to detail.
Ability to multi-task.

Nice To Haves

Process automation experience preferred.
Experience working with a global organization and/or interacting with colleagues in foreign jurisdictions.
Security certifications such as CISSP, CISA, CEH, OSCP or CCSP are preferred.

Responsibilities

Review and advice on security architecture of systems, applications and infrastructure throughout the lifecycle in classic and cloud environments.
Document and improve security and DevSecOps procedures and documentation requirements.
Assess the results of security test reports incl. static code analysis (SAST) reports, dynamic application analysis (DAST) reports and penetration testing reports with a focus on OWASP Top 10.
Document test results and remaining risks in GRC tool. Present them to Director IT Security and management.
Amalgamate industry best practices and organization specifics into security solutions.
Assist developers with the identification, understanding and implementation of remediation measures.
Support the creation of application security concepts and perform security reviews.
Assist in review and security assessments of AI solutions and their security guardrails and compliance.
Support security audits and security testing.
Support risk management process and vulnerability management process.