Estée Lauder Companies Senior Analyst, Application Security

Role & Responsibilities

• Review current security processes used by Software Engineering teams and develop optimization strategies to strengthen the application security posture
• Coordinate and perform vulnerability assessments using both automated and manual testing tools in collaboration with development teams
• Provide consulting and mentoring expertise to Developers, DevOps, and Software Engineering teams to promote and implement the DevSecOps program across the organization
• Analyze vulnerability data to identify security risks and determine false positives requiring remediation
• Prepare security vulnerability and risk management reports for management and key stakeholders
• Deploy best practice Cloud Configuration and Security Management tools and processes into Software Engineering teams
• Provide leadership and coordination skills to drive remediation of vulnerabilities within established timeframes
• Integrate secure development practices into agile development processes and frameworks
• Coach and mentor junior team members in developing advanced security skill sets within a geographically dispersed team environment

Qualifications

• Deep knowledge and understanding of application security vulnerabilities and frameworks (SANS, OWASP)
• Knowledge of threat modeling and risk analysis methodologies
• Strong expertise in internet technologies and web development best practices
• Strong analytical and problem-solving skills with cross-functional knowledge across development and security disciplines
• Understanding of Test Automation tools and frameworks such as SAST, DAST, and IAST
• Ability to communicate security-related concepts to both technical and non-technical audiences
• High degree of integrity, trustworthiness, and ability to lead and inspire organizational change
• Understanding of CI/CD pipelines covering source control, integration, and deployment (Bitbucket, Jenkins, JIRA, Artifactory, Nexus, git)
• Knowledge of securing cloud deployments and container technologies (Ansible, DeMisto, Docker, Kubernetes)
• Understanding of advanced Agile methodologies and iterative development practices
• Familiarity with microservices architecture and design patterns

Skills

Experience

Prior software engineering or architecture experience in languages such as Java, C#, .NET, or JavaScript is preferred. Demonstrated experience operating in agile development environments and integrating secure development practices is required. Proven track record of producing effective and innovative solutions at enterprise scale, with the ability to evaluate evolving security, application, and technology industry trends.

Education

Not explicitly stated; formal training in primary development toolsets, code frameworks, application engines, and database security is required.

Workplace

Compensation

The base compensation for this position ranges from USD 90,450 to USD 135,000 per annum.

Benefits

Health insurance coverage (medical, dental, and vision insurance), wellness and family support programs, life and disability insurance, retirement savings plans, paid leave programs, education-related programs, paid holidays and vacation time, participation in a highly competitive bonus program with the possibility for overachievement based on performance and company results.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.