Senior Application Audit & Risk Consultant

Keoni; Paris; Hybride; EUR 70 000 - 100 000; Plein temps

Résumé du poste

Keoni is seeking an experienced IT auditing consultant to assess and secure critical business applications across development and production environments, especially during redesigns, upgrades, security reviews, or regulatory changes.

You will map architectures, data flows, and controls, review code and logs, and deliver risk assessments, findings, action plans, and monitoring tables in close collaboration with business, development, production, security, and IT governance teams.

Qualifications

• Proficiency in IT audit methodologies, risk analysis, and control assessment.
• Expertise in application architectures, APIs, data flows, databases, cloud computing, access rights management, application security, and secure development practices.
• Ability to review code, configurations, logs, and test results, qualify vulnerabilities, and rule out false positives.
• Proficiency with audit and security tools, including Burp Suite, OWASP ZAP, Postman, Nessus, Qualys, OpenVAS, SonarQube, Checkmarx, Fortify, Snyk, Nmap, Wireshark, Microsoft Sentinel, Splunk, or equivalent.
• Excellent analytical, writing, presentation, and facilitation skills, with rigor, autonomy, diplomacy, and respect for confidentiality.

Responsabilités

• Define the scope of the mission, analyze the documentation and develop the work program.
• Conduct interviews, investigations, checks and tests on documents or on site.
• Evaluate the risks and the quality of the controls, then formalize substantiated findings.
• Facilitate feedback sessions and ensure follow-up on recommendations.

Connaissances

IT audit methodologies

Risk analysis

Control assessment

Application architectures

APIs

Data flows

Databases

Cloud computing

Access rights management

Application security

Secure development practices

Code review

Configurations review

Logs review

Vulnerability qualification

False positives elimination

Audit tools

Burp Suite

OWASP ZAP

Postman

Nessus

Qualys

OpenVAS

SonarQube

Checkmarx

Fortify

Snyk

Nmap

Wireshark

Microsoft Sentinel

Splunk

Equivalent tools

Outils

Burp Suite

OWASP ZAP

Postman

Nessus

Qualys

OpenVAS

SonarQube

Checkmarx

Fortify

Snyk

Nmap

Wireshark

Microsoft Sentinel

Splunk

Description du poste

Keoni is seeking an experienced IT auditing consultant to assess and secure critical business applications across development and production environments, especially during redesigns, upgrades, security reviews, or regulatory changes.

You will map architectures, data flows, and controls, review code and logs, and deliver risk assessments, findings, action plans, and monitoring tables in close collaboration with business, development, production, security, and IT governance teams.