Vacancy expired!
Responsible for implementing our strategy for integrating automated security controls into our evolving development life cycle and CI/CD pipelines to shift security “left”, without sacrificing the developer experience. Ensuring that the requirements of security as per the Software Security Policy and Technical Security Baseline are met for new agile deliveries and for Experian’s Legacy estate with flaws and issues managed effectively throughout all stages of an applications life. Engage with the Developer Champions community to support forward momentum to ensure that the latest security techniques are utilized to provide vulnerability free applications that can be delivered at speed to our clients.   Functions Work with the AppSec Manager and peers to deliver strategy for Automation of security controls (SAST, DAST, SCA…) Integrates 3rd party and builds custom solutions into our CI/CD pipelines and development cycles. Define security guardrails through automated tool policies, SLAs, custom rules, and support the developer community Help the enterprise manage vulnerabilities across automated tooling and manual security assessments Work with Champions to build relationships and ensure key activities are supported and deliverables are achieved in a timely manner. Support education and awareness strategy, rollout for Development community. Support the AppSec technical team (incident response, code reviews, risk assessments) and ensure relationships with Business and team maximized and effective.  Responsibilities/Requirements Support of AppSec Consultant function. (15%) Leads relationship with Development teams to implement security control automation based on SDLC requirements. (60%) Work with vendors to deliver improvements to development processes as part of defined projects / scope of work. (15%) Document Processes and SOPs (10%)