You will align and drive application security across group IT–managed and internally developed applications, collaborating closely with interdisciplinary to ensure a secure end‑to‑end lifecycle * After analysing and evaluating business requirements, you take decisions and conduct security assessments with a special focus on Identity and access management, ensuring secure role‑based access control, multi‑factor authentication, identity federation and privileged access management * Together with group IT teams, you define and implement API and service security standards, leveraging OAuth 2.0, OpenID Connect, JSON Web Tokens and mutual transport layer security to protect critical interfaces * Your responsibilities will include contributing to vulnerability and patch management processes, threat modelling (STRIDE) and risk assessments (MITRE ATT&CK), shaping an ...
mehr