D&T Analyst II - Cyber Security, Application Security

Job Description

The Digital and Technology team of General Mills India Centre is looking for a passionate and enthusiastic individual to contribute to the Global Digital Transformation initiative at General Mills in capacity of DT Analyst II - Cyber Security, Application Security. This role will report into Manager, Enterprise Vulnerability Management in India and work closely with DT Sr. Manager for Cyber and EA Governance. It is an Individual contributor role. As an analyst this individual will fulfill the ongoing requirements of application security. Help address internal application development gaps through education, implementation of security best practices, and mitigation management with a proposed maturity timeline. We recognize the need to address the gaps, and this role will develop and mature these capabilities while being able to adapt to a changing environment. The team he or she will be joining is dynamic, passionate, and open to new ideas. KEY ACCOUNTABILITIES Help define/build/run Application Security Program from framework through implementation. Partner with Cyber Security teams to understand the internal and external security risks AppSec program needs to address. Partner with various stakeholders and work together to identify missing or weak security controls and architectural risks. Mitigate them through the creation of standards based on best practices. Design a more secure software development lifecycle and architectural risk program. Support and consult Cyber Security, Product, and Development teams for application security, including threat modelling and AppSec reviews. Develop, enhance, and interpret security tools and standards across the enterprise. Serve as the Subject Matter Expert on Application Security across the enterprise ensuring all requirements are met. Equip development teams with the skills they need to produce more secure software, web, and mobile applications through managing risk, consolidating applications, and meeting enterprise policies and standards. Implement milestones and metrics to measure success. MINIMUM QUALIFICATIONS Education Full time graduation from an accredited university (Mandatory- Note: This is the minimum education criteria which cannot be altered) 3 Years of experience/understanding of Application Security and Cyber Security 2-3 Years of experience in Application development, CI/CD and devolving large scale enterprises software Passionate about Secure by Design/Zero Trust Architecture and implementing and maturing processes. Knowledge of Cyber Security and/or implementation of Secure Development Life Cycle(SDLC) and DevSecOps Baseline knowledge of navigating Digital and Technology Excellent communication skills - verbal and written Must have a strong continuous improvement mindset and process improvement methodologies Willing to work in a pure process-oriented role and collaborate across teams Self-driven with ability to drive and prioritize/complete multiple tasks independently Agility and ability to push through ambiguity and obtain results Must possess strong analytical skills Exceptional problem solving and analytical skills, able to quickly analyze and offer solutions to issues/problems encountered. Must possess strong analytical thinking and intellectual integrity Motivated to learn and adapt partnering closely with peers and leaders to ensure a successful outcome. PREFERRED QUALIFICATIONS Cyber Security certification if any Certified Application Security Engineer (CASE) Certified Ethical Hacker (CEH) or other EC-Council certification Any relevant SANS Institute security certification