Associate Security Analyst (Application Security)

Job Posting Organization:
The International Monetary Fund (IMF) is an international organization established in 1944 with the mission to promote global economic stability and growth. The IMF has a diverse workforce of over 2,700 employees from around the world, operating in 190 countries. The organization focuses on providing financial assistance, policy advice, and technical assistance to its member countries, aiming to foster economic cooperation and stability.

Job Overview:
The Associate security" style="border-bottom: 1px dotted #007bff !important;">Security Analyst (Application Security) plays a crucial role in integrating security measures throughout the Software Development Lifecycle (SDLC). This position requires collaboration with various teams, including development, infrastructure, and application teams, to enhance vulnerability remediation efforts and promote secure development practices. The successful candidate will leverage their foundational knowledge in application security, alongside strong coordination and communication skills, to maintain the security posture of enterprise applications. The role also emphasizes continuous process improvement, ensuring that security measures evolve alongside emerging threats and vulnerabilities.

Duties and Responsibilities:

• Application Security & Secure SDLC: Collaborate with technical teams to advocate for secure coding practices and assist in implementing Secure SDLC standards, which include defining security requirements for application design and development.
• Vulnerability Management & Security Controls: Review security testing results and support remediation efforts for identified vulnerabilities. Help implement security controls for applications deployed in both on-premises and cloud environments. Track vulnerability remediation activities and ensure timely closure of identified findings in collaboration with application and engineering teams.
• Security Awareness & Continuous Improvement: Support training initiatives and knowledge sharing on secure development practices within engineering teams. Stay updated on emerging security threats, vulnerabilities, and industry best practices to provide application security guidance to technical teams.

Required Qualifications:
Minimum qualifications include an advanced university degree or equivalent in Computer Science, Cybersecurity, or a related field, or a university degree supplemented by at least six years of relevant professional experience. Candidates should have experience in Vulnerability Management, Application Security, Secure Development, or related cybersecurity disciplines. Familiarity with security frameworks and standards such as OWASP Top 10 and NIST is essential. Additionally, experience with programming or scripting languages (e.g., Java, Python, .NET) and an understanding of secure architecture principles for web-based and cloud-based applications are required. Exposure to security testing methodologies and tools, including static analysis, dynamic analysis, vulnerability scanning, and penetration testing, is also necessary. Strong communication, project coordination, organizational, analytical, and collaboration skills are crucial for managing multiple priorities and tracking deliverables effectively.

Educational Background:
Candidates must possess an advanced university degree in Computer Science, Cybersecurity, or a related field, or a university degree supplemented by a minimum of six years of relevant professional experience. This educational background is essential to ensure that candidates have the foundational knowledge necessary for the role.

Experience:
The position requires a minimum of six years of relevant professional experience in areas such as Vulnerability Management, Application Security, Secure Development, or related cybersecurity disciplines. Candidates should have a proven track record of supporting cross-functional initiatives that involve multiple stakeholders, technical teams, and business partners, demonstrating their ability to navigate complex organizational structures and deliver results.

Languages:
While the job posting does not specify mandatory languages, proficiency in English is typically expected in international organizations like the IMF. Additional language skills may be considered advantageous, particularly if they facilitate communication with diverse teams and stakeholders.

Additional Notes:
This position is a one-year contractual appointment, with the possibility of renewal for up to four years of cumulative contractual service, depending on the incumbent's performance, budget availability, and ongoing business needs. The IMF is committed to diversity and inclusion, ensuring that employment decisions are made without discrimination. The organization welcomes requests for reasonable accommodations for disabilities during the selection process, with information on how to request accommodations provided during the application process.