Application Security Consultant

As an Application Security Consultant
, you will integrate our Secure Software Development services.

Together with our 15 experts, we develop, maintain, support and host Specialized Softwares. Our expertise is two-fold:

• Proposing our expertise to clients’ development teams in securing their Software Development Life Cycle (SSDLC or Secured-SDLC
  ).
• Developing highly secured softwares (
  Security by design
  ) based on customer’s requirements (e.g. itsme – authentication app) ;

In this frame, we are recruiting an Application Security Consultant who will play a key role in our application security services growth over the next years.

As an Application Security Consultant your main role will be to act as a Security Champion for our customers.

This means:

• Operationalise (technically) the concept of Security by Design/Default in its four components: the availability of applications and underlying systems, the integrity (non-alteration) of data, the confidentiality (non-disclosure) of data and processing, and finally the traceability of actions performed on the system.
• Give guidance on establishing a secure software development lifecycle (Secure-SDLC / Dev Sec Ops ),
• Help development teams to integrate application security best practices (e.g. OWASP ASVS), and security tooling/processes in their development pipeline (SAST, DAST, SCA, CVE follow-up, …),
• Ensure that the security requirements of all the components of a solution are properly identified based on the requirements issued, the Information Systems Security Policy and best practices.
• Assist architects in designing secure solution components, considering the client’s application and business context, and the technologies available on the market.
• Contribute to assess an existing SDLC (i.e., SAMM Assessment)
• Verify the application of security requirements, in particular security test scenarios. Ensure that tests are carried out before any production launch.
• Provide security support in specific areas of expertise.
• Finally animate training and coaching sessions to new security champions at client.

Considering your domain of expertise, we would like you to go further in applying your knowledge to developing Approach’s offering in terms of App Sec.

Consequently, you’ll soon bring your energy on Solution Owner responsibilities explained as:

• Technology watch
  :
  You will follow new tools, technical evolutions and industry trends, and share your knowledge with the team. This proactive approach will ensure that our offerings remain cutting-edge, relevant, and aligned with our clients’ ever-evolving needs.
• Relationships strengthening with our trusted business partners/suppliers
  :
  You will evolve to become our key representative in application security associations, or during application security events/conferences/meetings.
• Asset creation
  :
  Developing new assets and methodologies to complement and enhance our solutions will soon be part of your responsibility. These assets and methodologies will not only increase the efficiency of our solutions but also support and empower your colleagues in delivering high-quality results.
• Presales engagements
  :
  Participate in presales meetings around application security and help our Sales team in defining our customers’ needs.

Based on the current business dynamic through this business unit and our people organisation itself, we would like you to also take other responsibilities as Technical Leader for a part of our current team and so become a key technical player.

This role include:

• Mentorship on application security projects
  :
  Providing guidance and mentorship to team members, especially those less skilled in application security, will be crucial. Your support will be to help them navigate complex missions, leading their professional growth and ensuring successful project outcomes.
• Support on development and devops projects
  :
  Bringing a higher view to support and help our developers on their development and devops tasks, make technology choices or debug some scenario’s on technologies like .NET, Angular, Azure, Azure devops, OAuth (Key Cloak), …

• Significant experience
  , which we estimate to be 5-6 years, giving you the…