Senior Analyst, IT Security

Prudential's purpose is to help people get the most out of life. We will deliver our purpose by creating a culture in which diversity is celebrated and inclusion assured, for our colleagues, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and in exchange, we support our people's career ambitions. We pledge to make Prudential a place where you can Connect, Grow and Succeed.

Role Purpose :

The Senior Engineer - Application Security is expected to manage day to day operations around security tooling management, handling of operational tickets and performing

triaging of vulnerabilities and incidents. This role is expected to be hands-on with occasionally after office hours / weekend support on migration activities and handling of incidents.

Job Responsibilities :

The incumbent is expected to stay abreast on latest development on DevSecOps tools, techniques, and procedures, as well as having technical “know-how” on various attacker techniques and provide feedback for improvements to tools and processes as needed.

The incumbent will need to have an eye for detail in identifying security vulnerabilities / gaps and propose appropriate / relevant compensating controls.

The incumbent is to ensure security tooling are well maintained and managed in ensuring the effectiveness of tools. This include ensuring tools are maintain with updates, patches, upgrades, and other associated activities. The incumbent also required to maintain and establish good rapport with various tooling vendors, with regards to raising technical incidents and management of these incidents to resolution.

The incumbent need to ensure all application security related process and procedures are efficient and compliant with standards. In addition, the incumbent need to ensure that all application security associated reports and metrics accurately document the details of vulnerabilities, their potential impact, and suggested remediation needed to manage risk.

The incumbent is also required to spearhead application security initiatives, through collaboration with internal and external stakeholders (including third party solution provider).

Key Responsibilities :

• Manage application security specific tooling as per corporate standard with vendor recommendations.
• Develops scripts, integration code to ensure the DevSecOps tools work together and provide value to development teams
• Analyzes application security tool scan results and advises Development teams to strategically resolve identified issues, as part of triaging handling activities.
• Performs manual and static and dynamic application security testing with automated tools and manual techniques
• Communicates information, suggestions, and / or problems regarding project status and critical findings to stakeholders.
• Identifies, develops, and documents in detail security issues and recommendations.
• Coordinates with other functional groups involved in Information Security, Risk, Security Architecture and Software Development teams.
• Assists with Proof of Concept (PoC), technical evaluation, procuring, managing, and configuring Application Security tools in various environments
• Performs research of emerging technologies and design frameworks and capabilities required to guide development teams of new technologies adopted by the company
• Requires comprehensive knowledge and mastery in assigned areas applying skills and competencies in challenging and complex situations.
• Creates or maintains necessary DevSecOps processes and documentation
• Provides ad hoc reports as directed by leadership.
• Maintains confidentiality on all sensitive security matters.
• Support Application Security leadership team with alignment to overall team and function objectives.
• Considering business requirements and associated risk during triaging of application security findings.
• A good team player in managing internal and external stakeholders in resolving issues and aligning to objectives.
• Exhibit proactiveness in identifying, highlighting, and remediating gaps and issues.
• Participate in POV / POC of selected security solutions and provide insights on suitability.
• Provide insights and opinions on selection of solutions.
• Accountable in ensuring assigned tasks / projects / assignments are delivered as planned.
• Participate in department workshop planning for new IT security initiatives and projects.
• Assist to source for quote and review BOM (Bill of Material) during solution selection.

Job Requirements :