Application Security Operations Specialist
About The Position
The Application Security Operations Specialist ensures continuity of global operational coverage and supports strategic technology enablement for the Bank’s application security assessment and scanning program. The role is part of a global operations team providing follow-the-sun coverage for application security testing and scanning activities. It supports ongoing improvements in scanning capabilities, false-positive identification, and vulnerability verification through collaboration across the organization. The specialist executes and supports scanning operations, assists application teams with security findings, participates in incident response and technology strategy, and evaluates next-generation scanning technologies. The role also focuses on improving scanning-platform resiliency, identifying vulnerability-detection gaps, and analyzing trends to inform harness development and vulnerability-management lessons learned.
Requirements
- At least 3 years of experience driving and/or supporting tool integration with workflow platforms such as ServiceNow.
- Strong understanding of vulnerability-management concepts and terminology.
- Excellent prioritization, communication, and mentoring skills.
Nice To Haves
- Bachelor’s or master’s degree in Information Technology, Cybersecurity, or a related field.
- Familiarity with MITRE ATT&CK, cloud-based scanning, and compliance frameworks such as NIST and FFIEC.
- Experience with vulnerability-rating methodologies.
- Background in Windows and UNIX administration.
- Proficiency in scripting languages such as Python, PowerShell, or Bash.
- Hands-on experience with AI-assisted vulnerability-identification activities.
Responsibilities
- Execute automated and custom scan routines to detect application and source code vulnerabilities.
- Provide operational support for new frontier AI models and related testing harnesses.
- Identify, triage, and resolve events and scan results, including false positives; verify findings and support closure in collaboration with partners, including Enterprise Remediation Governance.
- Participate in incident response activities and share relevant information to support collaboration with control owners and remediation teams.
- Support application teams in understanding and resolving security findings.
- Participate in development and implementation of the technology strategy.
- Conduct proof-of-concept testing for next-generation scanning technologies.
- Optimize scanning platforms and ensure their resiliency, including through operational process improvement.
- Identify and map vulnerability-detection gaps to appropriate technology solutions.
- Analyze data and trends to inform harness development and vulnerability-management lessons learned.
Benefits
- Industry-leading benefits.
- Access to paid time off.
- Resources and support for employees.
- Eligible to participate in an annual discretionary incentive plan.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
