Security Consultant

at  Deploja AB

ESSENTIAL REQUIREMENTS:

• You know how to build secure software and how to implement security in DevOps. This includes knowledge of the stages of an SSDLC and associated activities such as threat modelling, risk assessment, secure design, security testing, and secure coding standards.
• You know how to make use of centralized enterprise application services, e.g. authentication, authorization, secret management, logging, etc. in a way that represents secure design/architecture and provide support to application teams on the same.
• You know how to read and interpret vulnerability reports, triage findings, and you have a solid understanding of what constitutes an application vulnerability and how to mitigate it.
• You know how to approach stakeholders, build trust and help others understand why application security is important and why they need to change. You are a catalyst, a helping hand, supporting teams and individuals through change.

ROLE:

The Cyber risk remediation team is designed with a strong emphasize on application security with a product portfolio that include:

• SSDLC Transformation Service: Supporting individual application teams on how to build secure applications and integrate a Cyber Defense mindset in behavior and deliveries.
• Vulnerability Remediation Service: Support stakeholders in meeting vulnerability remediation goals. Vulnerability remediation responsibility lies with the asset owners, but they step in as a catalyst to make it happen.
• Cyber Risk Review: Perform an assessment to understand maturity related to Cyber defense. Results are documented, and recommendations are tracked and supported in collaboration with stakeholders.
• Penetration Test Service: Coordinate penetration tests, conducted by external security specialists. Review and distribute detailed reports of findings, ensuring prioritized vulnerabilities are addressed and resolved efficiently.

TYPICAL EVERYDAY TASKS:

• Attend team meetings
• Attend stakeholder meetings
• Actively support remediation of vulnerabilities with stakeholders
• Participate in communication/awareness events
• Collaborate with Product Management function and stakeholders on potential new products and/or development of existing products
• Support backlog refinements and planning
• Build reports
• Analyze reports
• Code reviews