Secure Development Champion

ManpowerGroup

Milano

In loco

EUR 50.000 - 70.000

Tempo pieno

14 giorni+

Ricevi più risposte dai datori di lavoro

Invia un CV specifico per questa offerta in pochi minuti.

Descrizione del lavoro

A leading consulting firm is seeking a Product Security Specialist to enhance their application security program in Milan. Ideal candidates will have over 3 years of software engineering experience, a strong understanding of web applications, and are familiar with application security practices. The position is hybrid, offering flexibility for remote work, and emphasizes continuous learning in a fast-paced environment.

Competenze

At least 3+ years of experience in software engineering.
Previous coding experience in at least one language.
Excellent understanding of web applications and web servers.

Mansioni

Assess and improve security maturity in development teams.
Guide product development teams in building secure applications.
Contribute to security by design and continuous improvement.

Conoscenze

Application Security

Web Application Testing

Penetration Testing

DevSecOps

Vulnerability Management

OWASP Top 10

Strumenti

Veracode

SAST

DAST

TLS

Descrizione del lavoro

Join to apply for the Product Security Specialist role at ManpowerGroup

4 days ago Be among the first 25 applicants

Join to apply for the Product Security Specialist role at ManpowerGroup

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from ManpowerGroup

Manpower Group, in collaboration with SD Worx, is looking for a Product Security Specialist (m/f/x) to join the Milan office.

We are looking for an Application Security Specialist to support us in building a best in class application security program from our SD Worx Italy (F2A) headquarters in Milano.

The function is open for people from diverse professional background (e.g. development/test/consulting experience) and we are willing to adapt and further grow the function based on the experience and interests of the candidate.

You will be working on the following major activities:

Assessment and improvement of the maturity of development teams in the use of pentesting, bug bounty, threat modeling architecture reviews, and optionally code review
Guiding and assisting product development teams in building increasingly secure applications and in improving the security of current products
Contributing to security by design & by default and converting this into a continuous improvement process by focusing on awareness
Following up on secure product development practices and trends and provide suggestions to further improve our secure development processes
Assisting in defining standards for security application development lifecycle
Improving automated security testing through various methods and tools

Relevant topics: AppSec, IT Security, SDLC, Agile, DevOps, Penetration testing, Pentest, Security Breach, Ethical hacker, Threat Modeling, OWASP, Application Security, Web Application Testing, Security Testing Automation, TLS, Veracode, SAST, DAST, API, Bug bounty, vulnerability management

• At least 3+ years of experience in software engineering

• Previous coding experience in at least one language

• Excellent understanding of web applications, web servers, layer 7 application technologies, frameworks and protocols with respect to application development and deployment

• You are familiar with the foundations of secure development and application security (AppSec/DevSecOps) concepts and practices and you are curious to learn more in this fast changing field

• You are confident in coaching your fellow software engineers

• Experience in preventing and mitigating application security vulnerabilities, and more specifically with concepts such as OWASP Top 10 and CWE Top 25

• Penetration testing and bug bounty experience is beneficial but not required

Personal Competences:

Fast learner that is not afraid to continuously learn new skills and adapt to a fast changing environment
You are a team player that is interested in working with product developers or product owners to improve their application security skills
You take initiative and like to get things done
You are able to take a pragmatic approach in order to come up with solutions which are simple and feasible while keeping the end user in mind
Good English is a must

Hybrid mode

Seniority level