Application Security Consultant

Purpose of the role

To support business areas with day-to-day processing, reviewing, reporting, trading and issue resolution. 

Accountabilities

• Support various business areas with day-to-day initiatives including processing, reviewing, reporting, trading, and issue resolution.
• Collaboration with teams across the bank to align and integrate operational processes.
• Identification of areas for improvement and providing recommendations in operational processes.
• Development and implementation of operational procedures and controls to mitigate risks and maintain operational efficiency.
• Development of reports and presentations on operational performance and communicate findings to internal senior stakeholders.
• Identification of industry trends and developments to implement best practice in banking operations.
• Participation in projects and initiatives to improve operational efficiency and effectiveness.

Assistant Vice President Expectations

• Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
• Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
• Take ownership for managing risk and strengthening controls in relation to the work done.
• Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
• Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
• Engage in complex analysis of data from multiple sources of information, internal and external sources such as procedures and practises (in other areas, teams, companies, etc).to solve problems creatively and effectively.
• Communicate complex information. 'Complex' information could include sensitive information or information that is difficult to communicate because of its content or its audience.
• Influence or convince stakeholders to achieve outcomes.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.

.

Basic/ Essential Qualifications:

• Strong knowledge of CVEs, CWEs and their effect on the application.
• In depth knowledge of various AppSec technologies such as SAST, DAST, SCA, IAST RASP etc.
• Some development skills and hands on experience of one or more programming languages and framework.
• Experience with writing scripts in scripting language like python, javascript, etc

Desirable skillsets/ good to have:

• Ability to demonstrate knowledge and enthusiasm for low-level technical topics including native development (any platform)
• Experience of languages inherent to modern, mobile development: Java+JNI, Objective C, Swift etc
• Familiarity with process of reverse engineering and associated low-level technologies such as assembly and tools
• Familiarity with concept of mobile code hardening i.e. controls and techniques for the goals of anti-tempering, obfuscation and environment monitoring
• Ability to reproduce vulnerabilities in lab environment.