Application Security Lead
vor 3 Monaten
About the Role
The Application Security Lead guides and support IT Teams in the design and implementation of a Secure Software Development Lifecycle. The role has also a broad responsibility to cover tasks in all parts of the Essity Information Security Management Process (ISMP). Each Information Security team member’s responsibility is defined annually and is assigned based on Essity’s current risk exposure as well as the team member’s competences and individual development goals. The job reports to Director Information Security (CISO).
What You Will Do
Manage Essity’s application security programs.
Closely collaborate with multiple development and delivery teams of various software product.
Continuous drive threat intelligence and technology watch in selected area.
Being a trusted security advisor and provide security guidance to Essity colleagues.
Take decisions based on information security standard and instructions.
Annually plan and set priorities for security services and programs within own responsibility.
Assess the need for security documents, develop and maintain information security standard.
Coordinate more advanced security programs, related to application security.
Evolve Essity’s information security capabilities consistent with the risk portfolio.
Manage established security services.
Participate in internal and external audits.
Monitor compliance towards Essity security standards. Follow up on remediating activities.
Compile reports to IT Management providing assurance that InfoSec is being adequately addressed.
Who You Are
Education
Higher education (at least a bachelor’s degree) in computer science, Information Technology, or a related field.
Professional security certifications such as CISSP or CISA are meritorious.
Work Experience
Several years of working experience in the areas of software engineering, application security, and ethical hacking.
Functional skills
Deep understanding of application security related frameworks and maturity models.
Advanced level of understanding the OWASP top 10 vulnerabilities.
Experience with DevSecOps practices and AppSec tools (e.g., SAST, SCA, DAST).
Experience of conducting threat modeling.
Knowledge of programming languages.
Risk Management.
Skills in several IT security areas
Good knowledge in regulatory compliance
Leadership skills
Ability to explain complex security concepts in simple terms.
Quality oriented with high documentation and presentation skills.
Ability to motivate Essity employees to maintain a security conscious behavior.
Languages
English (fluent)
Application
Interested? Please send your application in English. If you are up for the challenge and think this sounds like you, apply online today Kindly note that due to data protection we will not accept applications via mail. As we will be making ongoing selections, interviews might start before the application deadline. Please use the link to apply via our career site. We may conduct background checks in the final stages of the recruitment process to verify your qualifications and fit for the role.
Together, we are improving lives, every day.
Working at Essity is not just a career; it is a chance to directly make the world a healthier, more hygienic and safer place. With impactful innovations coupled with sustainable solutions, we strive to reach more people every year with the necessary and essential solutions for well-being.
-
Cybersecurity Specialist for Application Security
vor 4 Wochen
Munich, Bayern, Deutschland mgm security partners gmbh VollzeitWir bei mgm security partners unterstützen unsere Kunden bei der Sicherheit ihrer Anwendungen und Systeme. Mit unseren Kollegen pflegen wir einen familiären Umgang , in dem jeder seine individuellen Stärken und Interessen einbringt.Cybersecurity Specialist / Application Security für Softwareentwickler als UmsteigerWir bieten Softwareentwicklern mit...
-
Cloud Security Architect
vor 1 Woche
Munich, Deutschland Opus Security VollzeitAbout Opus Security:Opus Security is a leader in cloud security orchestration and remediation. We empower organizations to secure their cloud environments through innovative solutions that automate security workflows and enhance threat detection and response. Our mission is to make cloud security accessible, efficient, and effective for businesses...
-
Lead Security Engineer
Vor 2 Tagen
Zürich, Lörrach, Munich, Stuttgart, Nürnberg, Freiburg, Augsburg, Berlin, Köln, Frankfurt am Main,, Deutschland LHH Recruitment Solutions VollzeitOn behalf of our client, an innovative financial institution in Zürich, we are on an exclusive search for a Lead Security Engineer to lead and grow the security operations team. The position entails 60% hands on work, 20% leadership, 20% strategy. The position allows for the ability to make decisions and execute them and is highly visible within the...
-
Senior Penetration Tester
vor 6 Monaten
Munich, Deutschland mgm security partners gmbh VollzeitWir bei mgm security partners unterstützen unsere Kunden seit mehr als 15 Jahren bei der Sicherheit ihrer Anwendungen und Systeme. Mit unseren Kollegen an den Standorten München, Berlin, Dresden und Đà Nẵng (Vietnam) pflegen wir einen familiären Umgang , in dem jeder seine individuellen Stärken und Interessen einbringt . Senior...
-
Cyber Security Lead Consultant
vor 4 Wochen
Munich, Deutschland MAM Gruppe VollzeitCyber Security Lead ConsultantWe are searching for an experienced Cyber Security Specialist, ideally with a consulting background, to join a Fintech consultancy in Germany.In this role you will be responsible for conducting thorough assessment of cyber security frameworks for their clients, advising on actionable solutions and improvements that meet their...
-
Cyber Security Strategic Leader
vor 1 Woche
Munich, Bayern, Deutschland MAM Gruppe VollzeitAbout the RoleWe are seeking a highly experienced Cyber Security Strategic Leader to join our team at MAM Gruppe. As a key member of our Cyber Strategy division, you will be responsible for developing and implementing comprehensive cybersecurity strategies for our clients.
-
Team Lead Cyber Security
vor 5 Monaten
Munich, Deutschland BridgingIT GmbH VollzeitStandort(e)**:Berlin, Karlsruhe, Köln, **Mannheim, München, **Nürnberg** Art**:Festanstellung, Vollzeit, Teilzeit und mobiles Arbeiten** Die **BridgingIT GmbH besteht seit 2008** und ist heute Teil der bridgingIT-Gruppe. Bei uns bist du an einem unserer **11 kundennahen, zentralen Standorte in Deutschland** Teil einer herstellerunabhängigen und...
-
Munich, Deutschland mgm security partners GmbH VollzeitWir - die mgm security partners GmbH - sind ein erfolgreicher IT Security Partner für mittelständische und große Unternehmen. Unsere Dienstleistungen umfassen Cybersecurity, Application- und Cloud-Security und reichen von Beratung bis Penetrationstests. Wir sind ein cooles Team von 50 enthusiastischen Spezialisten. Aufgrund unserer soliden Substanz und...
-
Security Bounty Program Leader
vor 5 Monaten
Munich, Deutschland Antal International Ohana GmbH Vollzeit**Research Profil Job Position** Presented by Antal International / Ohánà GmbH **OVERVIEW** Antal Reference Number AO-AO-PV-PMM-004 **Position** **Security Bounty Program Leader** (W, M, G) **Company **Munich **Salary Level **Very Good Salary Level - Budget per Year **Min. Practices Business Skills **> 3 Jahre **Experience** Expert Skills of...
-
Munich, Deutschland mgm security partners GmbH VollzeitWir - die mgm security partners GmbH - sind ein erfolgreicher IT Security Partner für mittelständische und große Unternehmen. Unsere Dienstleistungen umfassen Cybersecurity, Application- und Cloud-Security und reichen von Beratung bis Penetrationstests. Wir sind ein cooles Team von 50 enthusiastischen Spezialisten. Aufgrund unserer soliden Substanz und...
-
Senior Software Development Lead
vor 2 Wochen
Munich, Bayern, Deutschland Myra Security GmbH VollzeitJob Title:Senior Software Development LeadCompany Overview:Myra Security GmbH is a German technology manufacturer that offers a secure, certified Security-as-a-Service platform for protecting digital business processes.We protect the real world against digital threats with utmost passion and strive to provide an inclusive work environment where you feel...
-
Application Security Architect SAP
vor 3 Monaten
Munich, Deutschland Giesecke+Devrient GmbH VollzeitApplication Security Architect SAP (m/w/d)G+D macht das Leben von Milliarden von Menschen weltweit sicherer. Wir schaffen Vertrauen im digitalen Zeitalter mit integrierten Sicherheitstechnologien in drei Geschäftsbereichen: Digital Security, Financial Platforms und Currency Technology. Für unsere Kunden sind wir seit über 170 Jahren ein verlässlicher...
-
Munich, Bayern, Deutschland MAM Gruppe VollzeitWe are seeking an experienced Cyber Security Specialist to join our Fintech consultancy in Germany as a Cyber Security Lead Consultant.The successful candidate will have at least 5 years' experience in cyber security, with consulting experience essential. A degree in an IT field is desired, and you should be certified in cyber security (ISO 27001, CISSP,...
-
System Engineer
vor 6 Monaten
Munich, Deutschland 1&1 MAIL & MEDIA APPLICATIONS SE VollzeitAre you interested in topics such as security observability, egress monitoring, and the operative protection against data exfiltration in a highly available and load-intensive modern infrastructure for more than 43 million users? We handle massive operations: hundreds of petabytes of storage, 3.5 billion active logins per day, and nearly half an exabyte of...
-
Information Security Specialist
vor 4 Wochen
Munich, Bayern, Deutschland Rivada Space Networks GmbH VollzeitRivada Space Networks GmbH is seeking a highly skilled Information Security Engineer to lead our Corporate IT security initiatives and implement a comprehensive Zero Trust security architecture.Key ResponsibilitiesZero Trust Implementation: Develop, implement, and refine a Zero Trust security framework for our Corporate IT environment, ensuring granular...
-
Information Security Lead Consultant
vor 4 Monaten
Munich, Deutschland MAM Gruppe VollzeitOur client specialises in providing clear, practical digital solutions for data protection and compliance. They are seeking motivated individuals to join their innovative team, offering a dynamic and flexible work environment with flat hierarchies, supportive colleagues, and diverse tasks.Key Responsibilities:Act as a primary advisor for clients on...
-
Information Security Specialist
vor 4 Wochen
Munich, Bayern, Deutschland Rivada Space Networks GmbH VollzeitAbout the RoleRivada Space Networks GmbH is seeking a highly skilled Information Security Engineer to lead our Corporate IT security initiatives. As a key member of our team, you will play a vital role in protecting our sensitive data, ensuring our infrastructure is resilient, and guiding our organization toward the highest standards of cybersecurity.Key...
-
Cyber Security Solutions Executive
vor 4 Wochen
Munich, Bayern, Deutschland Darktrace VollzeitAbout Darktrace:Founded by mathematicians and cyber defense experts in 2013, Darktrace is a global leader in cyber security AI, delivering complete AI-powered solutions in its mission to free the world of cyber disruption.We protect more than 9,000 customers from the world's most complex threats, including ransomware, cloud, and SaaS attacks.Our roots lie...
-
Information Security Architect
vor 4 Wochen
Munich, Bayern, Deutschland Rivada Space Networks GmbH VollzeitJob SummaryRivada Space Networks GmbH is seeking a highly skilled Information Security Engineer to lead our Corporate IT security initiatives, with a focus on implementing and maintaining a Zero Trust security model. This permanent position offers a lot of creative freedom and a modern work environment with a hybrid working model.Key ResponsibilitiesZero...
-
Lead Cyber Security Analyst
vor 3 Wochen
Munich, Deutschland Materna Information & Communications SE VollzeitDas Materna Cyber Defense Center stellt die IT Sicherheit unserer Kunden sicher. Wir analysieren mögliche Risiken und begegnen ihnen angemessen – immer mit dem Ziel, die Gefahr von Cyber Security Angriffen zu minimieren. Dafür bieten wir verschiedene Leistungen wie Cyber Sicherheits Checks, ein Cyber Defense Center (CDC) oder unser...
