senior application security specialist.

about the company
A global financial messaging leader providing secure, reliable network infrastructure and communication services across the banking and financial ecosystem. The organization operates on a hybrid working model , driving high-security standards across international cross-functional teams.

about the job
As a Senior Application Security Specialist (Defensive / AppSec Architect), you will focus strictly on defensive application security, threat modeling, and embedding security architecture into the SDLC prior to deployment. This role works autonomously to translate business needs into robust security requirements across global agile teams, reporting to a Europe-based leadership structure.

• Security Architecture & Threat Modeling: Conduct risk analysis, design mitigations (e.g., access control, SSO implementation, secrets protection), and define enterprise security requirements across the SDLC.
• DevSecOps & CI/CD Security Integration: Automate and manage security testing frameworks within modern Agile pipelines.
• Remediation & Vulnerability Management: Apply deep knowledge of the OWASP Top 10 to engineer practical mitigation and remediation strategies rather than simply reporting flaws.
• Standard Setting & Autonomy: Establish and upgrade application security guidelines based on data classification, risk appetite, and business requirements.