Associate Security Analyst (Application Security)

Supports application security across the IMF software lifecycle by integrating security testing into delivery pipelines, reviewing vulnerabilities and coordinating remediation with development and infrastructure teams to strengthen controls for cloud and on-premises applications.

Department: Project Portfolio Management Section, Information Technology Department

• Promote secure coding and integrate security requirements into application design and development
• Integrate static, dynamic and component-analysis security testing into delivery pipelines
• Participate in threat modelling and security design reviews with senior engineers
• Review security-test findings and coordinate vulnerability remediation with application teams
• Implement application controls across cloud and on-premises environments
• Track remediation activity and support timely closure of security findings
• Deliver secure-development training and share emerging threat guidance

• Advanced university degree in computer science, cybersecurity or a related field, or a university degree with at least six years of relevant experience
• Experience in vulnerability management, application security, secure development or a related cybersecurity discipline
• Experience with a programming or scripting language such as Java, Python or .NET
• Understanding of secure architecture for web and cloud applications
• Exposure to static analysis, dynamic analysis, vulnerability scanning and penetration testing
• Experience coordinating cross-functional initiatives with technical and business stakeholders

• One-year contractual appointment
• Appointment may be renewed for up to four cumulative contractual years subject to performance, budget and business need