Application Security Engineer

At ING we encourage you to `Do Your Thing` to do more of what you love. We’re on a journey that’s centered around our customers, powered by technology and digital environment, driven by smart, determined people. Our customers feel our people are empowering them to stay a step ahead in life and in business. We’re proud of that!

If you think you are the ideal candidate for our “Application Security Engineer” position in our CISO organization; knowing that you will be responsible for information security governance and strategy.

If you think you have the following qualifications;

• Bachelor's degree in computer engineering or relevant fields
• 1-4 years of experience in IT security
• Hands-on experience in application security,
• Technical expertise to build security infrastructure from scratch or update existing systems in response to ongoing changes in the security landscape, including new risks and applicable regulations
• Experience with consulting and engineering in the design and development of security best practices; implementation of security measures to meet business goals, customer needs and regulatory requirements
• Strong technical foundation in information, system and network security space
• Expert knowledge and experience in
• Static code analysis,
• Vulnerability Management,
• SDLC processes
• Sast & Dast & Sca management (Invicti, Fortify, AttackFlow, Xray)
• Scripting knowledge (Powershell, Python, Javascript etc.)
• CI/CD processes
• Excellent verbal and written English communication skills
• Motivated self-starter with strong problem solving, pro-active and analytical skills
• Having one of the certificates is a plus: OSCP, CSSLP, CISM, CEH, GSEC, Security+, CDP, CSC
• High level of integrity, transparency, honesty and professional work ethic

If you think you may take charge of the following responsibilities;

• Works closely with system owners, developers, engineers and/or project teams to explain vulnerabilities identified to aid in their remediation
• Provides information security architecture consulting to business units for the development of solutions to manage information security risk, and also ensure that security capabilities are included in all aspects of our technology architecture
• Establishes a strategic security architecture vision, including standards and frameworks that are aligned with overall business and IT strategies, and the enterprise architecture
• Develops, implements, documents, and maintains security policies, procedures and practices
• Ensures all IT solutions align with enterprise security architecture and comply with security policies, frameworks and standards
• Advises and analyzes the current environment to detect critical security deficiencies and ensures fixes are implemented in-line with policies
• Collaborates with architecture community to align security technology roadmap with enterprise technology strategies
• Provides project consulting, evaluating proposed solutions including vendor products for information security risks and recommending alternative solutions or compensating controls
• Participates in solution architecture design, assists in determining security requirements by evaluating business strategies and requirements
• Assists project teams in implementing security measures to meet corporate policies and local regulations
• Evaluates new security solutions and approaches that align with business needs and strategic direction
• Participates in requirements definition, selection, design and implementation of security technologies
• Ensures web applications, APIs, and cloud services are planned, designed, developed, implemented and monitored in accordance with security policies and to meet compliance requirements
• Defines application security architecture based on enterprise reference architecture
• Defines the Secure Development Lifecycle (SLDC) standards for the organization and work with the product architects to ensure that the engineering teams are following the standards

What do we offer:

At ING we want your work to fulfill you in every way, and that is why we take care of even the smallest detail. Check out what is waiting for you;

At our organization, you first be yourself, then you are ING’er, therefore;

· 14 days of welcome leave days even in your first year! Don’t postpone your dreams!

· Flexible working models where you can manage your time and do your thing.

o Working in hybrid model where you can choose your flexible days

o Every 3rd week of the month working remotely

o With summer flexi, working remotely at the summer times

· We provide self-driven career opportunities where you have never

· Develop yourself with global/local ING Academy opportunities; TrainINGWeek, special certification programs with top universities, various training programs that will help you to empower yourself

· Special information sharing environment where you can update & align yourself

· Personal growth & challenging work with endless opportunities to realize your ambitions

· An informal, dynamic environment with innovative colleagues supporting your endeavors

· Share your innovation ideas while discovering PACE methodology

· Take a part in local and global projects and/or career opportunities

· Have fun with various communication activities & celebrations

· Explore new hobbies with our social clubs

· We care your health; comprehensive health insurance package for you and your beloved ones (spouse/children)

· Private Pension plan for your future dreams

· There are corners which easies your daily life like; hair dresser, gym, coffee places etc…

For more details about “Do Your Thing” please visit and watch !

https://www.youtube.com/watch?v=UBSGOJBnuyc

If you want to do your thing and explore the life while working don’t miss this opportunity!

**Candidates are expected not to share any sensitive personal data.