Application Security Manager - Bloomberg BNA Arlington, VA Bookmark Share Print 537 0 3

Listing Description

Bloomberg BNA seeks an Application Security Manager. As a member of the Bloomberg BNA Information Security Team, the Application Security Manager will play a key role in directing and executing the AppSec program for the company. This individual will be expected to set the overall direction and strategy of this program to include: integration with the SDLC (i.e. security review of design, QA testing, final product, etc.), influencing internal development organizations throughout the company, serve as a subject matter expert in application security to our systems architecture teams to address design and requirements questions, perform and facilitate both internal and third party penetration testing activities, and secure coding training.

This individual will combine experience in information security, software development, IT operations, and project management with strong interpersonal skills, self-directed learners with a proven ability to quickly learn new technologies, have the ability to work independently and collaboratively, and display enthusiasm for challenges.Develop the strategic direction and manage all aspects of the Application Security program for Bloomberg BNA.

Review source code, identify security vulnerabilities, perform risk analyses, and partner with development colleagues for remediation.

Perform Threat Modeling activities across a variety of applications and environments.

Create and deliver relevant secure coding and application security training.

Perform internal application penetration testing activities and facilitate third party assessments primarily targeting web and other internally developed applications.

Perform security assessments of existing architecture and make security recommendations for new deployments.

Manage application security vendor engagements, and provide budgetary planning and analysis.

Produce key performance indicator (KPI) metrics and trending as well as general reporting for the application security program.

Represent the Information Security team on all application security matters across the organization including ad-hoc meetings as well as various committees and work groups.

Create and maintain technical and policy documentation.

Participate in special projects and perform other duties as assigned.