Cyber Security - Centralized Application Management

Job Description:

Must Have Technical/Functional Skills

" 8+ years of experience in Cyber Security, Application Security, IAM, or Security Operations.

" Strong understanding of Identity & Access Management concepts.

" Experience with SSO, MFA, RBAC, PAM, and access governance platforms.

" Knowledge of application onboarding and security control implementation.

" Experience with vulnerability management and remediation processes.

" Strong understanding of cybersecurity frameworks such as NIST, CIS, ISO 27001, and Zero Trust principles.

" Experience working with ServiceNow, Azure DevOps, Jira, or similar platforms.

" Excellent stakeholder management and communication skills."

Roles & Responsibilities

We are seeking a Cyber Security Centralized Application Management (CAM) Engineer to support the onboarding, governance, security administration, and lifecycle management of enterprise applications. The role will partner with application owners, infrastructure teams, IAM teams, security operations, and compliance groups to ensure applications adhere to organizational cybersecurity standards, access controls, vulnerability management, and audit requirements.

Key Responsibilities

" Manage end-to-end onboarding and offboarding of applications into the centralized security ecosystem.

" Coordinate with application owners to implement cybersecurity controls and security baseline standards.

" Ensure integration of applications with Identity & Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) platforms.

" Maintain application inventory, ownership records, security classifications, and risk profiles.

" Support access governance activities, user entitlement reviews, certification campaigns, and segregation of duties controls.

" Perform application security assessments and coordinate remediation of identified vulnerabilities.

" Collaborate with Vulnerability Management, SOC, IAM, and Infrastructure teams to address security findings.

" Monitor application compliance with cybersecurity policies, regulatory requirements, and audit controls.

" Support security incident investigations related to managed applications.

" Develop and maintain operational procedures, security standards, runbooks, and onboarding guidelines.

" Coordinate application lifecycle activities including upgrades, decommissioning, and security reviews.

" Generate security dashboards, compliance reports, and management metrics.

Required Skills

" 5+ years of experience in Cyber Security, Application Security, IAM, or Security Operations.

" Strong understanding of Identity & Access Management concepts.

" Experience with SSO, MFA, RBAC, PAM, and access governance platforms.

" Knowledge of application onboarding and security control implementation.

" Experience with vulnerability management and remediation processes.

" Strong understanding of cybersecurity frameworks such as NIST, CIS, ISO 27001, and Zero Trust principles.

" Experience working with ServiceNow, Azure DevOps, Jira, or similar platforms.

" Excellent stakeholder management and communication skills.

Preferred Skills

" Experience with Microsoft Entra ID (Azure AD), CyberArk, SailPoint, Okta, Ping Identity, or Saviynt.

" Knowledge of application security testing (SAST, DAST, API Security).

" Experience supporting cloud-based applications in Azure or AWS.

" Familiarity with SIEM tools such as Microsoft Sentinel or Splunk.

" Banking and Financial Services cybersecurity experience.

Key Technologies

" Microsoft Entra ID (Azure AD)

" CyberArk

" SailPoint / Saviynt / Okta

" Microsoft Defender

" Microsoft Sentinel

" ServiceNow

" Azure DevOps

" Splunk

" Rapid7

" Active Directory

" PowerShell

Qualifications

" Security certifications preferred:

o CISSP

o Security+

o SC-300 (Microsoft Identity & Access Administrator)

o AZ-500 (Microsoft Azure Security Engineer)

o CyberArk or SailPoint certifications

Banking Domain Experience (Preferred)

" Application onboarding into enterprise IAM platforms.

" Access governance and regulatory compliance.

" Security control implementation for banking applications.

" Support of audit, risk, and cybersecurity governance initiatives