{"id":3264729,"url":"https://alion.io/job/bnp-paribas-cyber-security-expert-application-security","title":"Cyber Security Expert - Application Security","company":{"id":18159,"name":"BNP Paribas","domain":"group.bnpparibas","url":"https://alion.io/company/group","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":{"grade":"A","score":91,"open_postings":16,"ghost_share":0.125,"stale_share":0,"repost_share":0.438,"time_to_fill_p50_days":7,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India","Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17000,"max_usd":37000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Checkmarx","optional":false},{"name":"Fortify","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PKI","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Sonatype Nexus IQ","optional":false},{"name":"Power BI","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-26T08:13:12Z","employer_posted_date":null,"last_verified_at":"2026-10-26T08:13:12Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Responsibilities : \n\nDirect Responsibilities : \n\n- Executing IT risk assessment reviews, identifying controls gaps and working in collaboration with subject matter experts to devise appropriate mitigation plans.\n\n- Identifying key risk trends, issues and other insights requiring further investigation and following up with Technology as appropriate.\n\n- Knowledge of Secure Development methodologies and frameworks.\n\n- Hands-on experience in penetration testing and tools like AppScan, Webinspect, Fortify, AppSpider, BurpSuite, Qualys, Checkmarx, Coverity.\n\n- Well-versed in conducting Security Review, Assessments and providing recommendations.\n\n- Knowledge of OWASP, SANS standards.\n\n- Experience in Process Improvement, Controls Enhancement and Reporting.\n\n- Engaging with organization wide risk and control groups, including internal audit and territory control teams.\n\n- Working with Technology stakeholders (including Production Support and Development teams) to identify the IT risks affecting the organization and formulating appropriate remediation strategies based on full understanding of business exposure and compensating controls.\n\nContributing Responsibilities : \n\n- Excellent understanding of development security and its implementation in systems : identification, authentication, access control and provisioning, alignment of jurisdiction to business process.\n\n- Knowledge of single-sign-on security strategies (e.g. SAML, OAUTH2, SiteMinder etc.).\n\n- Excellent understanding of authentication related mechanisms (Kerberos, One Time Passwords, PKI).\n\n- Good understanding of cryptography and its practical uses within secure application development.\n\n- Familiarity with common security vulnerabilities (e.g. OWASP Top 10).\n\n- Strong technical skills required to understand vulnerabilities in detail and how to resolve/mitigate them.\n\n- Excellent knowledge of programming best practices, design patterns, etc.\n\n- Excellent problem solving skills, being able to develop approaches to complex technology and strategy problems, building consensus across diverse interest groups and working within constraints of practical delivery yet able to think beyond the requirements of immediate issues.\n\n- Well-developed written communication skills with the ability to summarise key issues, conclusions and recommendations in report form.\n\n- Target audiences will include regulatory authorities and internal/external auditors.\n\nTechnical & Behavioral Competencies : \n\n- Excellent knowledge of programming best practices, design patterns, etc.\n\n- Excellent problem solving skills, being able to develop approaches to complex technology and strategy problems, building consensus across diverse interest groups and working within constraints of practical delivery yet able to think beyond the requirements of immediate issues.\n\n- Well-developed written communication skills with the ability to summarize key issues, conclusions and recommendations in report form.\n\n- Target audiences will include regulatory authorities and internal/external auditors.\n\n- Hands-on experience in penetration testing and tools like AppScan, Webinspect, Fortify, AppSpider, BurpSuite, Qualys, Checkmarx, Coverity, Sonatype, Blackduck.\n\n- Well-versed in conducting Security Review, Assessments and providing recommendations.\n\n- Knowledge of OWASP, LLM, AI NIST framework, SANS standards.\n\n- Good to have knowledge on Automation, PowerBI, JIRA, python scripting.\n\n- Experience in Process Improvement, Controls Enhancement and Reporting.\n\n- Excellent Inter personal and presentation skills.\n\n- Strong in verbal and written communication.\n\n- Ability to liaise with cross-functional stakeholders globally.\n\n- Clear understanding of application and data security.\n\n- Must be flexible, independent, self-motivated.\n\n- Good analytical skills.\n\nSpecific Qualifications : \n\n- CEH, SSCP, OSCP certified.\n\n- Technical Graduate (Computer Science) Preferable.\n\nSkills Referential : \n\nBehavioural Skills : \n\n- Ability to collaborate / Teamwork.\n\n- Communication skills - oral & written.\n\n- Ability to share / pass on knowledge.\n\n- Active listening.\n\nTransversal Skills : \n\n- Ability to understand, explain and support change.\n\n- Analytical Ability.\n\n- Ability to develop and adapt a process.\n\n- Ability to develop and leverage networks.\n\n- Ability to manage / facilitate a meeting, seminar, committee, training.\n\nEducation Level : \n\n- Bachelor Degree or equivalent.\n\nExperience Level : \n\n- Experience 5 - 7 years.\n\nOther/Specific Qualifications : \n\n- 4+ years of Application security experience.\n\nSkills\nInformation Security, Cyber Security, Penetration Testing, AppScan, Qualys, OWASP, SAML, Identity Management, IT Risk, Applications Security, Vulnerability Assessment","description_format":"text","description_chars":4739,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Application Security","Artificial Intelligence","Business & SME Lending"],"lifecycle":[{"event":"open","at":"2026-10-26T08:30:31Z"}],"visa":[],"liveness":{"score":68,"band":"ok","label":"Likely open","p_open":1,"p_active":0.864,"p_room":0.788,"age_days":4,"expected_fill_days":7,"reasons":["seen:4","velocity","win:late"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/bnp-paribas-cyber-security-expert-application-security","json_url":"https://alion.io/job/bnp-paribas-cyber-security-expert-application-security.json","meta":{"generated_at":"2026-11-01T02:21:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3526,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18159},"rest":"https://alion.io/mcp/rest/get_company?id=18159"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbnp-paribas-cyber-security-expert-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbnp-paribas-cyber-security-expert-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbnp-paribas-cyber-security-expert-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bnp-paribas-cyber-security-expert-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbnp-paribas-cyber-security-expert-application-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3264729}},{"tool":"search_jobs","arguments":{"company":"group.bnpparibas","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3264729},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}