DevSecOps - Vulnerability
: Job Details :

Quanteam is an independent Financial Markets consulting company based in France, the UK, the USA, Canada, and Morocco. Our team of 1.000 employees supports Corporate and Investment Banks, Asset Management Companies, Insurance, and Corporate for their projects in financial engineering, quantitative research, regulatory implementation, SI transformation, and technology innovation.

Role Context:

The IT department acknowledges the critical importance of improving our cybersecurity vulnerability monitoring, governance, and remediation processes, particularly in the context of DevSecOps. We aim to fortify the security of our applications and client information by implementing a strategic and targeted program. This role will play a key part in developing and implementing a cross-functional governance model, ensuring effective coordination between Application Development and Maintenance and Information Security teams. The goal is to align remediation efforts with the company's security requirements and priorities.

Role Responsibilities:

• Expertise in vulnerability management with in-depth experience in SAST/DAST and SCA tools.
• Analyze scan outputs and define priorities for the remediation plan : data analytics capabilities.
• Cross-functional role involving close collaboration with ADM and InfoSec teams to ensure enhanced coordination and efficiency.
• Creation of a comprehensive, dynamic, and automated dashboard to discover, prioritize, remediate, and monitor vulnerabilities.
• Support DevSec Champions in implementing security practices.
• In-depth knowledge of OWASP top 10.

Qualifications:

• +5 years of experience in financial institutions
• Proven experience in cybersecurity, with a particular focus on vulnerability management
• Strong knowledge on patch management
• Strong analytical skills with the ability to process scan results and define action priorities.
• Demonstrated experience in creating and managing security dashboards.
• In-depth understanding of the software development process with the integration of security practices (DevSecOps).
• Excellent communication skills to support and guide DevSec Champions and other stakeholders.