Application Security Analyst

In this role you will be a member of an outstanding Information Security & Risk Management team that is responsible for enterprise Application Security. You will work with multiple stakeholders to drive App Sec strategy and implement controls and capabilities where needed. Additionally, you will evaluate innovative and emerging technologies supporting Application Security, participate in proof of concepts, and make decisions about what technology J&J will or will not pursue.

Responsibilities:

• Participate in the Application Security Program by mapping maturity of controls and capabilities across the enterprise; identify gaps and investment opportunities
• Evaluate innovative and emerging technologies supporting Application Security
• Assist with vendor “proof of concepts” and make recommendations about pursuing or not pursuing certain technologies
• Drive adoption of DevSecOps capabilities including SAST, SCA, and DAST
• Assist in tracking remediation of Application Security Testing findings that violate security policy
• Assist in roll-out of API Security tooling within our Cloud Infrastructure and API Gateways

Qualifications:

• A minimum of a Bachelor's Degree is required.
• Knowledge of modern Software Development
• Knowledge of DevSecOps and OWASP Top 10
• Must excel in an environment that allows you to challenge yourself and come up with creative solutions to complex problems.
• Exhibit intellectual curiosity to assess new technologies and understand the security implications.
• Must have strong interpersonal skills.
• The ability to think critically, analyze and decompose complex systems/processes/controls.
• Enjoy working in a collaborative team environment!
• Ability to work on multiple projects with conflicting deadlines is preferred.