Senior Information Security Analyst

Nomura; New York (NY); Hybrid; USD 120,000 - 145,000; Full time

Job summary

Nomura seeks an experienced SR Information Security Analyst (DevSecOps) in NYC to enhance application security. The role focuses on security automation, requires expertise in security frameworks, and offers a competitive salary range. Ideal candidates will have a strong background in secure software development practices and stakeholder collaboration.

Benefits

Medical insurance

Vision insurance

401(k)

Paid paternity leave

Paid maternity leave

Child care support

Disability insurance

Qualifications

• 3-5+ years software engineering experience with DevSecOps focus.
• Expertise in security frameworks including NIST and OWASP.
• Professional security certifications preferred (CISSP, CSSLP).

Responsibilities

• Drive innovation in DevSecOps security automation.
• Design and maintain robust software services.
• Implement security practices throughout the application lifecycle.

Skills

DevSecOps

Automation

Application Security

SDLC

Education

Bachelor's degree in Computer Science

Master's degree in related fields

Job description

Get AI-powered advice on this job and more exclusive features.

This range is provided by Nomura. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$120,000.00/yr - $145,000.00/yr

Job Title: SR Information Security Analyst (DevSecOps)

Corporate Title: Associate

Location: Hybrid in New York City (3 Days a week in office).

FULLY REMOTE IS NOT AN OPTION

The pay range for this position at commencement of employment is expected to be between $120,000 and $145,000 year*

Company overview

Nomura is a global financial services group with an integrated network spanning over 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Retail, Wholesale (Global Markets and Investment Banking), and Investment Management. Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit www.nomura.com.

Department Overview

Nomura has a robust global Information Security department, members of which are located in all of its major regions, namely Japan, Americas, India, Asia Excluding Japan (AeJ) and EMEA. This role will report directly to the Application Security Lead in New York

Position Overview

We are looking for a talented and experienced professional to join our team as an Application Security Engineer with specific focus on DevSecOps automation and innovation. In this role, you will part of a team leading the design, development, and implementation of robust and scalable application security solutions to protect Nomura’s critical assets. This role is technical and hands-on and requires a deep understanding of DevOps practices, high proficiency in Java and Python, and an interest in application security practices and generally the secure software development lifecycle (SDLC). It requires the development and implementation of processes, policies, standards, and solutions in collaboration with the Global Heads of Information Security and key stakeholders (e.g., Technology, business, legal, HR, compliance). You will play a key role in shaping our information security strategy and ensuring the resilience and effectiveness of application security solutions.

Key Responsibilities and Duties:

• Drive innovation in DevSecOps security automation across a global enterprise environment, implementing cutting-edge solutions and best practices
• Design, develop, and maintain robust software services that seamlessly integrate with SDLC toolchain, focusing on:
• Application security enhancement
• Security automation workflows
• Continuous integration and deployment pipelines
• Lead strategic partnerships with Application Security development teams to:
• Drive adoption of security best practices
• Implement robust security practices throughout the application lifecycle
• Develop and implement automated security reporting systems that provide:
• Shift-left security status updates
• Comprehensive analytics to guide developers
• Strategic insights for application owners
• Executive-level reporting for business stakeholders
• Foster collaborative relationships with key stakeholders to ensure:
• Alignment with industry security standards
• Compliance with regulatory requirements
• Implementation of robust security frameworks
• Adherence to governance protocols
• Maintain expertise in emerging security landscapes, including Artificial Intelligence and Machine Learning, Cloud and Blockchain technologies

Key Skills and Experience

• Master's or Bachelor's degree in Computer Science, Information Technology, or related fields
• 3-5+ years of proven software engineering experience, with expertise in:
• Spring Data and Spring REST implementations
• JSON and related technologies
• Junit5 and Mockito frameworks
• Interest in implementing application security principles and secure Software Development Life Cycle (SDLC) practices in a large, global enterprise
• Strong background or keen interest in security frameworks including:
• NIST Cybersecurity Framework (CSF)
• SANS security guidelines
• OWASP security practices
• Professional security certifications preferred and interest in pursuing certifications as part of professional development
• Certified Information Systems Security Professional (CISSP)
• Certified Secure Software Lifecycle Professional (CSSLP)
• Outstanding analytical and problem-solving capabilities with proven project management experience
• Exceptional interpersonal skills with demonstrated ability to communicate effectively across diverse teams and stakeholder groups

“Base pay offered may vary depending on multiple individualized factors, including market location, corporate and functional title and duties, job-related knowledge and advanced degrees, skills, and experience. The total compensation package for this position may also include other elements, including a sign-on bonus, restricted stock units, and discretionary awards in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, employee will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors”.

Nomura is an Equal Opportunity Employer

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Financial Services, Investment Banking, and Capital Markets

Referrals increase your chances of interviewing at Nomura by 2x

Inferred from the description for this job

Medical insurance

Vision insurance

401(k)

Paid paternity leave

Paid maternity leave

Child care support

Disability insurance

Get notified when a new job is posted.

Sign in to set job alerts for “Information Security Analyst” roles.

New York, NY $50,000.00-$65,000.00 1 week ago

New York City Metropolitan Area $190,000.00-$215,000.00 1 week ago

New York City Metropolitan Area 2 weeks ago

Lead Information Security Engineer - Data at Rest Encryption Infrastructure Engineering and Delivery

Summit, NJ $111,100.00-$237,100.00 28 minutes ago

Manager, Information Security Innovation Engineer (Automation and Innovation)

Platform Professional Services Consultant (Remote)

Manager, Information Security Innovation Engineer (Automation and Innovation)

Manager, Information Security Innovation Engineer (Automation and Innovation)

Bethpage, NY $103,846.00-$145,386.00 2 months ago

Manager, Information Security Innovation Engineer (Automation and Innovation)

Manager, Information Security Innovation Engineer (Automation and Innovation)

Business Analyst – Fidessa or Ullink (Securities Lending / Stock Loan)

Jersey City, NJ $120,000.00-$150,000.00 1 week ago

Senior Business Analyst for the Division of HPD Tech

New York, NY $114,887.00-$114,887.00 1 month ago

Cyber Command Vulnerability Management Specialist - Hybrid in Brooklyn, NY - 2 Years Contract

Pennington, NJ $117,100.00-$181,800.00 1 week ago

New York City Metropolitan Area 19 hours ago

New York City Metropolitan Area 1 week ago

New York, NY $80,000.00-$115,000.00 4 days ago

New York, NY $120,000.00-$140,000.00 2 weeks ago

Edison, NJ $85,000.00-$145,000.00 1 month ago

New York City Metropolitan Area 2 weeks ago

New York City Metropolitan Area $95,000.00-$120,000.00 23 hours ago

New York, NY $100,000.00-$140,000.00 1 day ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.