Analyst Lead, Cybersecurity (SAST, DAST, Threat Modelling , SCA)

At FIS, progress starts with people. We believe diverse perspectives lead to stronger ideas, better solutions and greater impact. If you're looking for a place where you can contribute, grow and help advance the future of financial technology, your next opportunity is here. About the role As an Application Security professional, you will help strengthen the security of applications by developing security policies and standards and supporting application security practices. You will work across secure development, application assessments and threat modeling while applying your knowledge of related security domains. What you will be doing: Develop and maintain policies and standards for application security. Perform and support static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), API security assessments, threat modeling and container scanning. Conduct secure code reviews and identify vulnerabilities through manual and automated testing. Help teams understand and remediate application security vulnerabilities. Apply working knowledge of cryptography, identity and access management, and threat and vulnerability management. What you bring Required qualifications 9+ years of experience in software development and application security, including API security, SAST, DAST, SCA, secure code review, threat modeling and container scanning. Hands-on experience with application and API security assessments using tools such as Burp Suite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode or Checkmarx. Strong knowledge of application security, web applications, OWASP Top 10 and SANS Top 25, including identifying and remediating vulnerabilities. Strong knowledge of information security principles and security technologies, including encryption, data protection and privileged access. Experience building effective working relationships with colleagues and clients. Preferred qualifications Experience with software composition analysis tools such as Black Duck. Knowledge of common malicious-code and attack techniques. Broad working knowledge of cryptography, identity and access management, and threat and vulnerability management. The impact you’ll make As an Application Security professional, you will help strengthen security throughout the software development lifecycle. Your work across security standards, threat modeling, testing and vulnerability remediation will help teams identify application risks and address them effectively. What we offer you When you join FIS, you become part of a team that's shaping how the world pays, banks and invests. We’re committed to helping you thrive, both professionally and personally. At FIS, we offer you: Internal career growth opportunities A voice in the future of fintech Always-on learning and development Collaborative work environment Opportunities to give back Privacy Statement FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice . Sourcing Model Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company. #pridepass