Application Security Specialist
Sumitomo Mitsui Banking Corporation16 days ago
Tralee, IrelandSenior
Responsibilities
- Ensure code-scanning vulnerabilities comply with organizational policies and are remediated before production release.
- Work with developers to identify, explain, validate, and fix code deficiencies across SAST, SCA, DAST, IAST, and container-security findings.
- Partner with development, security architecture, and vulnerability management teams on remediation, secure-development practices, threat modeling, reporting, and SLA validation.
- Manage security champion and application developer outreach programs.
- Publish and present management reports on the state of the Application Security program across Americas Division entities.
- Perform some manual testing to validate vulnerabilities or penetration-testing findings.
- Create code fixes and automation scripts supporting internal cybersecurity projects.
- Work occasional weekends or nights when required by project, support, or business needs.
Requirements
- 7+ years of experience as an application security analyst or application penetration-testing analyst.
- Experience managing remediation efforts, security champions, and application developer outreach programs.
- Expertise with C#, C++, Java, Python, and .NET, with the ability to read and explain code deficiencies.
- Ability to write code fixes and automation scripts for internal cybersecurity projects.
- Experience developing and maturing CI/CD pipelines for code quality and vulnerability detection.
- 4+ years of experience with Static Application Security Testing (SAST) or Dynamic Application Security Testing (DAST).
- 2+ years of experience with container-security issues and container technologies.
- Thorough understanding of the Secure Software Development Lifecycle, OWASP Top 10 or CWE, and common software threats and mitigations.
- Process and detail orientation, including the ability to create detailed process documentation.
- Experience with Jira and Confluence.
- Bug bounty and/or penetration-testing experience is a bonus.
Benefits
- Hybrid work model with work-from-home and office options.
- Weekly attendance at the Tralee office is required, and employees must live within a reasonable commuting distance.
- Occasional weekend and night work may be required based on business needs.
- Reasonable accommodations are available during the candidacy process for applicants with disabilities.
About Sumitomo Mitsui Banking Corporation
Sumitomo Mitsui Banking Corporation provides corporate, investment, and commercial banking services—such as lending, capital markets, global trade finance, treasury/FX, and transaction banking—to corporate, institutional, and consumer clients. Headquartered in Tokyo, it is the core banking subsidiary of Sumitomo Mitsui Financial Group (SMFG), one of Japan’s three major banking groups, whose shares trade in Tokyo and as NYSE ADRs (SMFG). SMBC serves clients through a network spanning nearly 40 countries.