Application Security Analyst

In May 2023 Reward Gateway was acquired by Edenred. Edenred is a leading digital platform for services and payments for people at work, connecting 52 million users and 2 million partner merchants in 45 countries via close to 1 million corporate clients. With our shared missions of ‘Making the World a Better Place to Work’ and ‘Enriching connections, For good’, you’ll be contributing to improving employee engagement and building better, stronger and more resilient organisations to improve people’s daily lives. Our shared mission guides our every action and charts a sustainable path to a better future.

An opportunity has become available for an Application Security Analyst working with the Head of Cyber Security and Red Team Lead. This role will be responsible for evaluating products and applications to ensure they are being designed and deployed in compliance with information security standards and industry best practices. The successful individual will grow to become the key enabler between security, product, and engineering teams. They will need to understand security requirements from a variety of outputs (vulnerability scanners, pen testing, code scans, regulatory requirements), triage and prioritize the findings, and then work with Product Managers to implement changes to improve the security of our products. They will also provide security consultation to Product Managers, to ensure that security is embedded in product development and strategy, to ensure that security analysis is conducted on any changes or new requirements.

Key Responsibilities

• Identify security vulnerabilities from a wide pool of technological solutions
• Perform risk analysis to triage and manage the remediation or mitigation activities
• Working with the Red Team Lead, perform threat modeling activities across a variety of applications and environments
• Perform security assessments of existing architecture and make security recommendations for new deployments or changes
• Produce key performance indicator (KPI) metrics and trending as well as general reporting for the application security program
• Propose application security tools within existing development processes (SDLC, CI/CD)
• Work closely with the Head of Cyber Security and Product Managers to plan and schedule security enhancements
• Improve and maintain secure development standards
• Support the incident response and architecture review processes whenever security expertise is required
• Manage application framework and perimeter security improvement projects
• Assist with the planning and execution of application penetration tests
• Support the creation and maintenance of product security information within our knowledge base to assist clients, RFPs, and the bid process
• Grow into a Subject Matter Expert (SME) in the field of Application Security

Skills

• At least 2+ years of experience in an Application Security- or Security Analyst role
• Industry certifications such as CISSP, CISM, and CISA, are desirable
• Basic understanding of secure coding principles
• Experience working with cloud-based applications and services
• Familiarity with a variety of software development & automation tools
• Strong critical thinking and problem-solving skills
• Ability to understand business needs and commitment to delivering high-quality, prompt, and efficient service to the business

The Interview Process

• Online interview with the Senior Talent Partner. This should last no longer than 40 minutes
• Online interview with the Head of Cyber Security & Product Manager

Be comfortable. Be you. At Reward Gateway, we want all of our employees to feel comfortable bringing their passion, creativity and individuality to work. We value all cultures, backgrounds and experiences, as we truly believe that diversity drives innovation. Express yourself, join our community and help us Make the World a Better Place to Work.