Analyst, Application Security Management at First Bank of Nigeria Limited Full Time

Job Title: Analyst, Application Security Management

Job Identification Number: 576
Location: Lagos
Employment Type: Full Time

Job Description

• Participate in the creation of enterprise security policies, standards, baselines, guidelines & procedures.
• Offering training to Application Developers to become Application Security ExpertsReview code for security vulnerabilities and practices dangerous to security and privacy.Write custom rules on automated source code scanning tools
• Build security into infrastructure and architecture designs and guide the implementation with the operations team
• Create and deliver knowledge sharing presentations and documentation to developers and operations teams
• Working with developers to refine security checkpoints in the SDLC based on best practice and other industry-accepted doctrine such as NIST SP 800-115 and ISO security standards.
• Developing secure coding standards that are based on industry-accepted best practices such as OWASP Guide, SANS CWE Top 25, or CERT Secure Coding to address common coding vulnerabilities.
• Identifying and using tools to perform source code security analyses to identify vulnerabilities and attack vectors in web applications.
• Perform Security Assessment, Vulnerability Assessment, threat Analysis/modelling & Risk Assessment on the bank’s application (APIs, Mobile, Web Application, Containers) before and after deployment to production
• Working alongside the Cyber Security Analyst to scope and refine web application penetration testing methods.
• Obtaining and reviewing all required artefacts as part of approval analyses at security checkpoint phases in the development cycle.
• Support Head of IT Security in tracking and managing inventory of applications across the organization, gathering and analysing relational data between business systems
• Assisting in periodic security risk assessments, IT security audits and assessments, and management reporting.
• Supporting changes to information security policies, procedures and standards as part of a continuous improvement model.
• Managing/Optimizing of the Web Application Firewall, API Security Gateway, Data Masking tool, Load Balancer and Database Activity Monitoring
• Learn on the job and explore new technologies with little supervision
• Write reports including recommendations, root cause analysis, security summary analysis, and project roadmap
• Perform scheduled and adhoc security and compliance reporting
• Support Security Monitoring team to define and maintain security awareness program.

Job Requirements
Minimum Education:

• First Degree in Computer Science / Engineering, Systems Engineering or with strong Information Security component.

Minimum Experience:

• 3 years Security Engineering experience.

Knowledge:

• One or more of the following certifications:
  • CISSP
  • CEH
  • SCCP
  • CISA
  • ISSAP
• Oracle Database Certifications
• Microsoft Database certifications
• OSCP
• eLearnSecurity (eCPPT, eWPT, eWPTX)
• GIAC (GWAPT, GPEN, GCIH,GXPN,GMOB)
• ECSAAWS Certification
• CISM
• ISACA CSXP.

Skill / Competencies:

• Customer relationshipbusiness/ operational strategy
• IT governance
• Technical Strategy & Planning
• Business Continuity Management
• Business Change Management
• Human Factor Engineering
• Installation And Integration
• Service Strategy
• Service Transition
• Service Operation
• IT quality management
• IT Appreciation & Application
• Programming and Scripting
• Hardware Configuration
• Business Analysis
• Database Design & Administration
• Server Administration
• Operating Systems Administration
• Network Planning & Design
• Application Security
• Docker and Kubernetes Security
• Cloud Security
• OWASP
• Mobile Application Security
• API Security.

Application Closing Date
22nd July, 2022.