Application Security Business Partner

Job brief

We are seeking an Application Security Business Partner to work closely with development teams, ensuring that applications and services are designed, built, and maintained with strong security principles in mind. This role involves proactive threat modeling, security reviews, and continuous collaboration with developers to improve product security across the entire lifecycle.

Responsibilities

• Collaborate with development teams to analyze business requirements and assess their impact on product security.
• Model potential security threats for applications and services, and propose effective mitigation mechanisms.
• Define, document, and enforce application security requirements throughout the development process.
• Conduct security reviews of system architecture, source code, and application releases.
• Monitor and ensure timely remediation of vulnerabilities by coordinating with development teams.
• Work closely with DevSecOps teams to integrate security scanners and testing tools into CI/CD pipelines.
• Perform continuous security testing, code reviews, and assessments to enhance software security posture.

Requirements

• Proven experience in application security or a related field.
• Strong understanding of OWASP Top 10, OWASP Mobile Top 10, and CWE Top 25 vulnerabilities and mitigations.
• Knowledge of application security standards and frameworks such as OWASP ASVS and WSTG, and ability to apply them in practice.
• Solid understanding of infrastructure, containerization, and associated security risks.
• Familiarity with microservices architecture and security approaches for distributed systems.
• Hands-on experience in Go, Python, or JavaScript development is a strong plus.