https://www.linkedin.com/jobs/view/2640446606/?refId=ecedbd4e-b4e8-4264-9d14-2e168af75b49

Cyber Security Applications Expert

Diebold Nixdorf

Slovakia, Europe

 Job Description: Expect more. Connect more. Be more at Diebold Nixdorf. Our teams automate, digitize, and transform the way more than 75 million people around the globe bank and shop in this hyper-connected, consumer-centric world. Join us in connecting people to commerce in this vital, rewarding role. The Cyber Security Applications Expert is responsible for validating that application services are designed and implemented with high security standards. The role analyzes the security of applications in tandem with their underlying services, including connected dependencies such as middle-tier systems and databases. Additionally, the Cyber Security Applications Expert addresses legacy and emerging security issues and implements repeatable secure development practices to reduce the introduction of program design flaws that may lead to exploitation. As issues are uncovered, the Cyber Security Applications Expert communicates with the appropriate technical and leadership teams to ensure a focus on risk mitigation – allowing for business continuity, but without negligent risk. Application security engineers are constantly assessing applications for weaknesses and finding resolutions before they can be abused. This position is also responsible for assessing the security of applications for business-to-business initiatives, third-party relationships, outsourced solutions and vendors. Considered a highly knowledgeable individual, the application security engineer is expected to recommend programmatic controls and monitor and manage secure development practices to address modern day issues. Application security engineers think like attackers, but always acts with integrity and do not abuse their privilege. You are responsible for: Attend and participate in application projects and change management committees. This includes interacting with business units and technical teams to understand what is coming and how their projects can be more secure from the beginning. Work in tandem with developers to provide repetitive validation testing prior to production while allowing for a continuous cycle of development followed by application security assessments. Document delivery and implementation advances that meet defined service-level agreements (SLAs) and business metrics. Highly engage in information security projects that evaluate existing security infrastructure and propose changes as defined by security leadership and architects. Additionally, deliver projects on time, within budget and in accordance with SLAs. Focus on application security that observes compliance – Payment Card Industry (PCI), etc. – and privacy laws. Drive security efficiencies, enabling security team members to work on more advanced tasks. Perform other duties as assigned. Qualifications: 5-7+ years of related experience required Bachelors degree in computer science, information assurance, MIS or related field, or equivalent. SANS certifications (GWAPT) and others, CISSP (preferred, or CSSLP), OSCP (and related). Highly technical and analytical experience, with a proven deep background (preferred 5+ years in addition to cybersecurity) in application programming. Vulnerability and penetration-testing skills Excellence in communicating business risk from cybersecurity issues Experience with security of intra-company and third-party APIs. Solid understanding of network and web protocols. Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively. Cultural sensitivity. Preferred Qualifications: Experience with applications hosted in Microsoft Azure. DevOps background in public and private clouds. Experience with cryptography controls and measures to secure applications and data. Proficiency with scripting in Python, JavaScript, PowerShell, PHP or Ruby. Experience with one or more of the following: ISO 27001, NIST, PCI Data Security Standard (PCI DSS), the General Data Protection Regulation (GDPR), Center for Internet Security (CIS) standards or Service Organization Controls (SOC) 2 Highly trustworthy, leads by example. 