Job
Description
As a Senior Application Security at NiCE, you will play a crucial role in operationalizing the application security program. Your responsibilities will include: - Ensuring that development teams execute application security processes such as code scanning, threat modeling, and remediation tracking as part of the SDLC. - Monitoring and reporting on application security program performance by providing metrics and dashboards for management visibility. - Coordinating with development, DevOps, and product teams to embed security activities in pipelines and workflows. - Assisting in operationalizing application security tools (SAST, DAST, SCA) and ensuring their effective use by development teams. - Facilitating vulnerability management processes by tracking remediation progress and escalating risks when necessary. - Supporting the Application Security Manager in maturing governance frameworks, including policies, standards, and best practices. - Organizing and coordinating training, awareness, and communication efforts related to secure development practices. To excel in this role, you should have: - A Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience. - 4-7 years of experience in application security, software development, or security program management. - Understanding of secure SDLC concepts and software development practices. - Familiarity with application security tools (SAST, DAST, SCA) and their integration into CI/CD pipelines. - Experience in program tracking and reporting, including dashboards, KPIs, and compliance metrics. - Cloud security knowledge and experience, with AWS preferred. - Advantageous to have experience in program or project management within a security or development context, familiarity with cloud application security, DevSecOps practices, and certifications such as CSSLP, CISM, or Security+. - Strong organizational and coordination skills, ability to influence without direct authority, excellent communication skills, and an analytical mindset. Joining NiCE will offer you an opportunity to be part of a market-disrupting, global company where you can learn, grow, and explore endless internal career opportunities. The NICE-FLEX hybrid model allows for maximum flexibility with a balance of office and remote work. NiCE is known for its innovation in AI, cloud, and digital domains and is recognized as a market leader with a global presence and diverse workforce. As a Senior Application Security at NiCE, you will play a crucial role in operationalizing the application security program. Your responsibilities will include: - Ensuring that development teams execute application security processes such as code scanning, threat modeling, and remediation tracking as part of the SDLC. - Monitoring and reporting on application security program performance by providing metrics and dashboards for management visibility. - Coordinating with development, DevOps, and product teams to embed security activities in pipelines and workflows. - Assisting in operationalizing application security tools (SAST, DAST, SCA) and ensuring their effective use by development teams. - Facilitating vulnerability management processes by tracking remediation progress and escalating risks when necessary. - Supporting the Application Security Manager in maturing governance frameworks, including policies, standards, and best practices. - Organizing and coordinating training, awareness, and communication efforts related to secure development practices. To excel in this role, you should have: - A Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience. - 4-7 years of experience in application security, software development, or security program management. - Understanding of secure SDLC concepts and software development practices. - Familiarity with application security tools (SAST, DAST, SCA) and their integration into CI/CD pipelines. - Experience in program tracking and reporting, including dashboards, KPIs, and compliance metrics. - Cloud security knowledge and experience, with AWS preferred. - Advantageous to have experience in program or project management within a security or development context, familiarity with cloud application security, DevSecOps practices, and certifications such as CSSLP, CISM, or Security+. - Strong organizational and coordination skills, ability to influence without direct authority, excellent communication skills, and an analytical mindset. Joining NiCE will offer you an opportunity to be part of a market-disrupting, global company where you can learn, grow, and explore endless internal career opportunities. The NICE-FLEX hybrid model allows for maximum flexibility with a balance of office and remote work. NiCE is known for its innovation in AI, cloud, and digital domains and is recognized as a market leader with a global presence and diverse workforce.
