Medior Application Security Analyst

Keystone Solutions is seeking a Medior Application Security Analyst focused on risk management for a consultancy mission at a client site. The client manages a portfolio of approximately 800 applications, including nearly 400 web applications, utilizing various technologies and providers. A lack of proper lifecycle management can lead to significant risks, including service interruptions, data compromise, and increased technical debt.

As a consultant, you will be responsible for:

• →Taking charge of the risk and requirement aspects of the Secure Application Lifecycle Management (SALM) process.
• →Supporting projects from initial qualification to production, ensuring that controls align with application criticality and maintaining traceability of decisions.
• →Collecting relevant information to assess application criticality and determining applicable SALM pathways and controls.
• →Conducting or assisting in risk analyses and threat modeling according to established methodologies.
• →Participating in architecture, design, and flow reviews, defining and verifying application security requirements.
• →Advising project managers, architects, developers, and stakeholders on security measures.
• →Consolidating security documentation and preparing SALM advisories.
• →Contributing to the development of standards, checklists, models, and lessons learned from SALM processes.

The ideal candidate will possess:

• Strong analytical skills to structure complex situations and identify priority risks.
• Pragmatism in proposing realistic and verifiable measures.
• Pedagogical skills to make security requirements understandable to projects and stakeholders.
• Attention to detail in documenting assumptions, decisions, evidence, and residual risks.
• Autonomy in managing multiple cases simultaneously.
• Collaboration skills to work effectively with developers, architects, DevSecOps, and suppliers.

At Keystone Solutions, we pride ourselves on our consultancy nature, offering dynamic projects that provide diverse challenges across various client environments. Our commitment to turbo-charged learning ensures that you will experience professional development and broad learning opportunities. As a

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

• Accompagnement de projets : exigences, revues, dérogations, risques résiduels et avis de sécurité
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Analyse de risques applicatifs, identification des scénarios de menace et définition de mesures de traitement
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Communication et vulgarisation auprès des chefs de projet, architectes, développeurs, métiers et fournisseurs
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Documentation, traçabilité des décisions et utilisation d’outils de suivi ou de GRC - Level: T1 - Junior - Most recent: Any time
• Méthodes de modélisation des menaces et référentiels : OWASP, STRIDE, ISO 27005, NIST SSDF, NIS2 et CyFun
• (mandatory) - Level: T1 - Junior - Most recent: Any time

French
(mandatory)
Level Proficiency (C2)