Application Security Lead

Essity; München; Vor Ort; EUR 60.000 - 100.000; Vollzeit

Zusammenfassung

An established industry player is seeking an Application Security Lead to guide IT teams in implementing a Secure Software Development Lifecycle. This role involves managing application security programs, collaborating with various development teams, and enhancing information security capabilities. The ideal candidate will have a strong background in software engineering, application security, and ethical hacking, along with proficiency in DevSecOps practices. Join a forward-thinking company dedicated to improving lives through innovative and sustainable solutions.

Qualifikationen

• Several years of experience in software engineering and application security.
• Deep understanding of application security frameworks and maturity models.

Aufgaben

• Manage application security programs and collaborate with development teams.
• Monitor compliance with security standards and prepare reports for management.

Kenntnisse

Application Security

Ethical Hacking

DevSecOps

Threat Modeling

Regulatory Compliance

Communication Skills

Ausbildung

Bachelor's degree in Computer Science

Professional security certifications (CISSP, CISA)

Tools

SAST

SCA

DAST

Jobbeschreibung

The Application Security Lead guides and supports IT Teams in designing and implementing a Secure Software Development Lifecycle. The role also encompasses tasks across all areas of the Essity Information Security Management Process (ISMP). Each team member’s responsibilities are defined annually based on Essity’s current risk exposure, individual competencies, and development goals. The position reports to the Director of Information Security (CISO).

What You Will Do

1. Manage Essity’s application security programs.
2. Collaborate closely with multiple development and delivery teams across various software products.
3. Continuously monitor threat intelligence and emerging technologies in relevant areas.
4. Serve as a trusted security advisor, providing guidance to colleagues.
5. Make decisions following security standards and instructions.
6. Plan annually and set priorities for security services and programs within your scope.
7. Assess the need for security documentation, develop, and maintain security standards.
8. Coordinate advanced security programs related to application security.
9. Enhance Essity’s information security capabilities in line with the risk profile.
10. Participate in internal and external audits.
11. Monitor compliance with security standards and follow up on remediation activities.
12. Prepare reports for IT Management to assure adequate attention to InfoSec matters.

Who You Are

1. Education
2. Bachelor’s degree or higher in Computer Science, Information Technology, or a related field.
3. Professional security certifications such as CISSP or CISA are advantageous.
4. Work Experience
5. Several years of experience in software engineering, application security, and ethical hacking.
6. Technical Skills
7. Deep understanding of application security frameworks and maturity models.
8. Proficiency with OWASP Top 10 vulnerabilities.
9. Experience with DevSecOps practices and tools (e.g., SAST, SCA, DAST).
10. Experience conducting threat modeling.
11. Knowledge of programming languages.
12. Skills across multiple IT security domains.
13. Good understanding of regulatory compliance.
14. Ability to communicate complex security concepts simply.
15. High-quality documentation and presentation skills.
16. Motivational skills to promote security awareness among employees.

Languages

1. Application

If you are interested, please submit your application in English. We encourage motivated candidates to apply online promptly, as interviews may commence before the deadline. Due to data protection, applications via mail are not accepted. Final-stage background checks may be conducted to verify qualifications and suitability.

Together, we are improving lives, every day.

Working at Essity offers the chance to contribute to a healthier, more hygienic, and safer world through innovative and sustainable solutions, reaching more people each year with essential products for well-being.