- Cyber security analyst - Application Security is responsible for providing consultation on various cyber security requirements for applications, infrastructure, and emerging technologies.
- Bachelor (undergraduate) degree in a relevant field (Computer Science, Cyber Security, or others) OR an equivalent combination of education, training, and experience
- Minimum of 2 years of professional experience in any of the following technical disciplines: software development and coding, application security, DevSecOps methodologies, identity and access management, cloud security, security operations and incident response.
- Candidate having 2-3 years of experience with IT skills (such as application development, infrastructure management) with no prior cyber security experience, but has desire for a career in IT security shall also apply.
Position responsibilities include:
- Providing policy and risk-based consultation to enterprise customers ensuring a robust cybersecurity posture for applications and services hosted on-premises, private cloud or SaaS.
- Evaluate security vulnerabilities, assess risk, and propose solutions to defend against threats to enterprise assets.
- Performing security assessment for critical enterprise assets and SaaS solutions to ensure Ford data is adequately secured.
- Collaborate with other cyber services to provide best-in-class consultation and support to enterprise customers.
- Reporting cyber security metrics by tracking key performance indicators (KPIs)
- Establishing robust engagement and communication channels to provide timely and quality response.
Skillset required:
- Knowledge of cyber security framework and industry standards (NIST CSF, ISO27001/2, OWASP, etc.), Threat Modeling and IT Risk Assessment
- Knowledge on best practices for IAM flows and grant types, OAuth2, OIDC and SAML standards
- Experience with API security best practices to protect sensitive data and services
- Knowledge with crypto algorithms and functions to build secure solutions
- Familiarity with common security flaws and ways to address them (e.g. OWASP Top 10)
- Knowledge of DevSecOps, agile principles, and security policies.
- Assist teams in triaging and addressing security vulnerabilities
