Keeping the company safe, secure and compliant is a top priority at ING. As part of the team, you will collaborate with different internal stakeholders to conduct Security assessments, support secure design and development practices, providing security subject matter expertise and education and instilling the core security mindset and culture. You will employ a combination of static and dynamic analysis methodologies to identify and remedy complex vulnerabilities across our products and services, as well as collaborating and communicating with security expert peers across to help implementing best practices across the engineering organization Key Reponsabilities Security Assessments - Penetration Testing: You will examine chosen targets looking for vulnerabilities and weaknesses, assess applications for design related security risks and assist teams in determining appropriate remediation for identified issues;Provide secure code review by assessing reports generated using automated tools (eg Fortify, Checkmarks, etc);Consultancy: Provide subject matter expertise for specific application development scenarios;Provide security advice for tooling (mainly in the area of CI/CD);Participate in audit reviews – provide advice/challenge when/if required;Define & maintain the relevant Software Security processes:Document and improve local software security processes;Bridge the gap between global best practices from inside and outside of the organization with the internal way of working;Tooling– Knowledge on the following but not limited to: Static Application Security Testing – eg Fortify, Checkmarks, etc;Dynamic Application Security Testing – eg Burp Suite, Acunetix, Webinspect, etc;PenTesting - eg Kali, Metasploit, etc.What you'll bring to the teamKnowledge and experience: Experience with OWASP, static/dynamic analysis, and common security tools;Experience working within a Software Development Life Cycle;Familiarity with common security libraries, security controls, and common security flaws;Experience performing software security reviews and implementing security solutions;Understanding of network and web related protocols (such as TCP/IP, UDP, IPSEC, HTTP, HTTPS);Familiarity with cloud security controls and best practices;Understanding of security engineering, system security, authentication and security protocols, cryptography, or application security;Prior experience with DAST and SAST software tools;Software development or scripting skills represent an advantage.Requirement: Excellent written and verbal communication skills – ability to explain technical solutionsto both technical and non-technical audiences;Strong sense of ownership, urgency, and drive;Customer-focused and enjoy working as part of a team;Strong problem solving and analytical thinking - ability to diagnose and resolve ambiguous problems;Willingness to continuously improve skills;Willingness to support and coach less experienced members of you team; provide help when needed and criticize in a constructive manner.Soft skills: Passion for technologyExcellence in executionResult orientedTeamplayerProblem solvingEffective communicationAble to work under pressureDuration: Permanent Work location:Milan About ING ING offers many opportunities to build a diverse and rewarding career. You will be joining an international innovative digital bank, the first in Italy to adopt a fully flexible smart working model, and you will be working in a stimulating environment where you can grow both as an individual and as a professional.Our purpose - empowering people to stay a step ahead in life and in business - represents our belief in people's potential. We don't judge, coach or to tell people how to live their lives. We empower people and businesses to realize their own vision for a better future.#doyourthing is our brand direction with us each and every day. It is how we articulate our purpose and our promise to make banking frictionless to the world. 'do your thing' is about people being free to live the life they want to live, knowing that they will make their world a little better for it.Do you think you are "a step ahead"? Apply now! The benefits of joining ING In addition to being a part of a great team, working in a fun and innovative environment, we offer: Super flexible smart workingCompetitive base salaries and performance based bonusesDiverse cultures & Innovative mindsetsInternational EnvironmentCommitment to sustainabilityLots of training development opportunities to help you growLots of moments dedicated to physical and mental well-beingA special day off when it is your birthday: we call it #doyourbirthday!And of course we can't forget: free water & coffee at the office! Our Commitment Diversity is a fundamental element of our corporate culture, and we are fully committed to creating a safe and inclusive environment, based on mutual respect and the value of diversity, offering equal job opportunities to all qualified candidates.
#J-18808-Ljbffr
