Sr. Manager Applications Assessment

Profile

**MEMBERS ONLY**SIGN UP NOW***.
**MEMBERS ONLY**SIGN UP NOW***. places the highest importance on the confidentiality, availability and integrity of customer, company and employee information. As a member of **MEMBERS ONLY**SIGN UP NOW***.’s Enterprise Information Protection team, you will play a critical role to ensure that customer, company and employee information is secure while enabling technology and business partners throughout **MEMBERS ONLY**SIGN UP NOW***. to innovate, drive sales and provide superior customer care in our stores, online and through our various contact channels.
The Sr. Manager, Applications Assessment will manage a team of application assessors, while performing penetration testing on **MEMBERS ONLY**SIGN UP NOW***. web applications, web services, mobile applications, devices, and systems. Sr. Manager will identify security weaknesses and evaluate the risk posture of **MEMBERS ONLY**SIGN UP NOW***.’s technology portfolio, while balancing our assessment capacity against enterprise risk. This role will be responsible for security services delivery, including the use of application security tools for detection and remediation of security weaknesses. The Specialist will partner with **MEMBERS ONLY**SIGN UP NOW***. development and business teams to explain relevant security weaknesses and provide guidance for remediation.
**MEMBERS ONLY**SIGN UP NOW***. is seeking a motivated individual interested in specializing performing security assessments across a wide range of systems. This role will have opportunities to expand professionally through training and research opportunities to expand their technical skillset to include testing of Internet of Things (IoT) devices, specialized devices (robots, kiosks, registers, etc), and infrastructure systems.
This role reports to the Associate Director of Enterprise Risk and Compliance.
Responsibilities:
Manage and professionally develop a team of 5-7 Application Assessors, with varying levels of assessment experience
Develop and refine new and existing application assessment capabilities, processes and strategies
Work cross-functionally with security and engineering teams to uplift our application security posture and understanding
Perform penetration testing on **MEMBERS ONLY**SIGN UP NOW***. Applications and Systems
Assess and report security weaknesses and their risk according to **MEMBERS ONLY**SIGN UP NOW***.’s application penetration testing methodology
Perform personal research to stay current on security trends, new vulnerabilities, and technology
Make recommendations and handle escalations related to remediations, utilizing a risk-based approach, to balance business needs and security risk.
Brief EIP Application Security leadership on assessment results, activities performed, and evaluation of potential risks
Identify testing methodology or process improvements and make recommendations to EIP Application Security leadership on improvements
Basic Qualifications:
6 years of direct full-time information security, penetration testing, software development, or software engineering.
2 years of management experience, managing technical teams.
Familiarity with popular web application languages and platforms. For example, JavaScript, HTML, .NET, Java or other similar technologies.
Understanding of application security vulnerabilities, testing techniques, and the OWASP framework
Experience with intercepting proxies, dynamic analysis tools, or static analysis tools
Knowledge of secure development of web applications, mobile applications or thick client applications
Preferred Qualifications:
Experience working in various cybersecurity related roles
Experience with one or more external compliance frameworks (PCI, HITRUST, etc)
Industry relevant certifications or training
Bachelors or advanced degree in Information Systems, Computer Science, Software Engineering, Computer Engineering or an equivalent field. Equivalent direct work experience acceptable

Company info

Sign Up Now - MiamiCrossing.com