Senior Application Security Specialist (Hybrid)

SMBC; Tralee; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC is seeking an Application Security Specialist to ensure code scanning vulnerabilities align with policy and are remediated before production release. The role requires a strong development background and the ability to explain code deficiencies to stakeholders across languages, serving as a subject matter expert in the AppSec domain.

The successful candidate will work closely with developers to scan all code in the environment, focusing on SAST, SCA, DAST, IAST, and container security.

Qualifications

• 7+ years of experience as an Application Security analyst or Application Penetration Testing analyst.
• Experience managing remediation efforts, security champions and application developer outreach programs.
• Expertise with programming languages such as C#, C++, Java, Python, .Net.

Responsibilities

• Explain code issues and fixes to development communities and stakeholders.
• Work with developers daily to ensure code in the environment is scanned and reported (SAST, SCA, DAST, IAST, container security).
• Interface with security architecture teams on remediation, best practices, threat modeling, and vulnerability management.
• Publish and present high-level management reports on the State of AppSec Program within Americas Division entities.
• Some manual testing to validate vulnerability or penetration findings.
• Weekend and night work may be needed as project demands.

Skills

Application Security

Code review

CI/CD pipelines

SAST & DAST

OWASP Top 10

Jira/Confluence

Tools

Docker

Kubernetes

CI/CD tooling

Job description

SMBC is seeking an Application Security Specialist to ensure code scanning vulnerabilities align with policy and are remediated before production release. The role requires a strong development background and the ability to explain code deficiencies to stakeholders across languages, serving as a subject matter expert in the AppSec domain.

The successful candidate will work closely with developers to scan all code in the environment, focusing on SAST, SCA, DAST, IAST, and container security.