Application Security Lead

• The Role

  We are looking for an Application Security Lead who will play a key role in enhancing the application security strategy for Aflac. This role will require someone who is comfortable communicating with development teams and leadership on Aflac’s overall security technologies and integrations in our multi-speed environment.  We want someone who is motivated, uses their own initiative and will accelerate the effectiveness of a significant Global Security organisation.  You will play a key role setting strategy for application teams in the US & Northern Ireland to ensure we have continuous secure deployments of our products and services.  We will provide you with extensive opportunities to learn and grow, and want you to bring your creativity, ingenuity and experience as we continue to build out our team.

  The Team

  When customers come to us in their time of need, they require secure, resilient systems to manage their policies, so it is critical that our infrastructure and applications are protected. As a widely recognised Fortune 500 company, Aflac’s brand is one of its most valuable assets and protecting its reputation is of utmost importance. The Aflac NI Security Team is being formed to bring subject matter expertise, thought leadership and innovative problem-solving techniques to enhance capabilities in support of the Aflac Global Security Strategy.

  At Aflac NI, we are building a diverse, multi-function Cyber Security Team to support our Global Security Program protecting our customers in the US & Japan. Over the next 3 years, the Aflac NI Security Team will grow to over 30 and take ownership of key components of the security program. We are integrating with the Global Security Team to strengthen existing functions and build new capabilities.

  What you’ll be doing

  • Collaborating to redesign the Aflac Application Security Strategy
  • Driving a culture of secure software development within Aflac
  • Acting as an Application Security Lead for Aflac Northern Ireland
  • Working with Application Stakeholders to integrate security tools, standards and processes into the Software Development Lifecycle
  • Defining and communicating metrics to show overall progress for the application security program
  • Assisting in secure design and advisement of current and future CI/CD standards, tools and processes
  • Integrating threat modelling practices into the SDLC
  • Providing application security test cases and penetration test validation
  • Communicating security risks and impact within applications to various stakeholders including senior leadership

  Skills and experience

  Essential

  • Bachelor’s degree in a computer related discipline and or 5+ years related work experience in related information security fields
  • Experience with Agile development processes and integrating secure development practices
  • Extensive knowledge of CI/ CD pipeline tools and technologies and how to secure them
  • Experience with enterprise static code analysis tools (Veracode, Checkmarx, Whitehat Security, etc.)
  • Experience with continuous integration tools for security unit tests(Junit, Mocha, xUnit)
  • Experience with enterprise application dynamic analysis scanners and proxy tools (Qualys, Veracode DAST, AppSpider, Burpsuite, etc.)
  • Extensive knowledge of the OWASP Top 10
  • Advanced knowledge of various programming languages including C#, Python, ASP.NET, Java

  Desirable

  • Previous experience building out an application security program
  • Experience creating and enhancing processes that embed security in the SDLC
  • Experience in threat modelling (DREAD, STRIDE, SAFECode tactical threat modelling)
  • Salesforce experience
  • Security certifications e.g. CSSLP, CISSP.
  • Working knowledge of the Atlassian suite of products including Confluence and Jira

  Aflac Northern Ireland is an equal opportunities employer