Medior Application Security Analyst

Keystone Solutions is seeking a Medior Application Security Analyst focused on risk management for a consultancy mission at a client site. The client manages a portfolio of approximately 800 applications, including nearly 400 web applications, utilizing various technologies and providers. A lack of proper lifecycle management can lead to significant risks, including service interruptions, data compromise, and increased technical debt., As a consultant, you will be responsible for:

• Taking charge of the risk and requirement aspects of the Secure Application Lifecycle Management (SALM) process.
• Supporting projects from initial qualification to production, ensuring that controls align with application criticality and decision traceability.
• Collecting relevant information to assess application criticality and determining applicable SALM pathways and controls.
• Conducting or assisting in risk analyses and threat modeling according to established methodologies.
• Participating in architecture, design, and flow reviews, defining and verifying application security requirements.
• Advising project managers, architects, developers, and stakeholders on security measures.
• Consolidating security documentation and preparing SALM advisories.
• Contributing to continuous improvement by developing standards, checklists, and SALM experience feedback.

The ideal candidate will possess:

• Strong analytical skills to structure complex situations and identify priority risks.
• Pragmatism in proposing realistic and verifiable measures.
• Pedagogical skills to make security requirements understandable to projects and stakeholders.
• Attention to detail in documenting assumptions, decisions, evidence, and residual risks.
• Autonomy in managing multiple cases simultaneously.
• Collaboration skills to work effectively with developers, architects, and service providers.

At Keystone Solutions, we pride ourselves on our consultancy nature, focusing on on-site work and the consultant identity. You will engage in dynamic projects, facing diverse challenges across various client environments. Our commitment to turbo-charged learning ensures that you will experience professional development and broad learning opportunities. As a

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal., * Accompagnement de projets : exigences, revues, drogations, risques rsiduels et avis de scurit

• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Analyse de risques applicatifs, identification des scnarios de menace et dfinition de mesures de traitement
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Communication et vulgarisation auprs des chefs de projet, architectes, dveloppeurs, mtiers et fournisseurs
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Documentation, traabilit des dcisions et utilisation doutils de suivi ou de GRC
• (mandatory) - Level: T1 - Junior - Most recent: Any time
• Mthodes de modlisation des menaces et rfrentiels : OWASP, STRIDE, ISO 27005, NIST SSDF, NIS2 et CyFun
• (mandatory) - Level: T1 - Junior - Most recent: Any time

Language requirements:

French (mandatory) Level Proficiency (C2)