IT Senior Application Security Engineer (f/m/d)

at  Deutsche Brse

LEARN. DEVELOP. GROW. BUT ALWAYS: SHARE VALUE

Join our international team that drives positive change, united by a spirit of openness and curiosity. We empower you to have an impact and to grow – personally and professionally. With us, you work at the heart of financial systems and evolve the way markets operate. We’re excited about the future because we are the ones shaping it. Let´s do this together by sharing value!

WHO WE ARE

Tracing its origins to 1585, Deutsche Börse Group has become one of the world’s leading exchange organisations and an innovative market infrastructure provider. In this role, we provide investors, financial institutions and companies access to global capital markets. What’s your part in all this? With your commitment you contribute to the success of our unique business model: offering a wide range of products, services and technologies for security, transparency and integrity on the markets. By creating trust in the markets of today and tomorrow we foster growth and contribute to the prosperity of future generations.
Luxembourg

RECRUITING TEAM

Take your career to the next level with us and embrace new challenges!
+496921111810
Our Recruiting Team is looking forward to your call or e-mail.

As part of the IT Engineering Unit acting in the domains of architecture, infrastructure and information security, you will report to the CFS IT Security Lead and take responsibilities in a broad range of application security engineering activities covering the entire CFS IT landscape. Your assignments will include:

• Analysing and documenting the security of 20+ applications according to the criteria defined by the corporate Information Security department. Your expertise typically ranges from operating systems to Web applications and includes third-party software and public Cloud services.
• Identifying the information security impacts caused by business and technical projects, based on the projects’ requirements and architecture
• Performing and documenting the information security risk assessment of the applications along the ISO/IEC 2700x controls
• Managing the open information security risks and vulnerabilities for the CFS IT landscape; accurately maintaining the corresponding risk and vulnerability registries; ensuring mitigating measures are properly assigned, implemented and delivered in due time
• Defining application penetration test scope, scenarios and following-up on execution; analysing penetration test finding reports
• Analysing the information security risks and vulnerabilities; designing, documenting and promoting innovative solutions at application level to mitigate them; analysing relevant third-party patches; analysing and implementing for specific information security projects (e.g. SIEM onboarding, Privileged Access Management…)
• Closely interacting with IT development, infrastructure, operation and project management teams as well as with third-party vendors to collect information/communicate on technical security topics
• Going hands-on with the CFS IT systems to extract necessary security design information when it is not readily available
• Managing the relation with the corporate Information Security department, adequately interacting with their expert resources
• Answering to information security enquiries coming from customers, corporate Information Security, or internal/external auditors