Senior Application Security Expert

Who are we?

As the founding entity of RAINBOW PARTNERS, Quanteam is a consulting firm specializing in the fields of Banking, Finance, and Financial Services. Guided by our core values of closeness, teamwork, diversity, and excellence, our team of 980 expert consultants, representing 35 different nationalities, collaborates across 12 international offices : Paris, Lyon, New York, Montreal, London, Brussels, Geneva, Lisbon, Porto, Casablanca, Madrid and Singapore. Committed to sustainability (Ecovadis Gold), diversity (gender index : 92%), and quality of work life (Best Workplace Experience), Quanteam is a forward-thinking enterprise.

Our Expertise

With a dual expertise in both business and IT, Quanteam supports its corporate clients (investment banks, asset management companies, private and retail banks, custodians, etc.) across the entire Front-to-Back spectrum in evolving their business activities and transformation projects.

Our teams are organized into 5 expertise areas :

➡ Quantitative Finance

➡ Risk, Compliance, and Regulatory

➡ Operations and Finance

➡ Transformation and Organization

➡ Information Systems

In 2023, Quanteam generated a revenue of €74.6 million.

We are looking for a Senior Application Security Expert

This role is part of the Cybersecurity department, dedicated to strengthening IT risk management, application security, and operational resilience across multiple entities. The successful candidate will join the Application Security Core Team , supporting the rollout of the Group’s AppSec strategy. Key tasks include analyzing and addressing vulnerabilities, collaborating with solution providers, and updating security guidelines. The role also involves consolidating KPIs and contributing to governance committees.

MAIN TASKS :

Be part of the Application Security Core Team within the Group IT Cybersecurity and Digital Fraud area.

Contribute to the deployment of the Group’s Application Security strategy , acting as a key player in its implementation program.

Identify Application Security rules, requirements, and guidelines that need to be created or updated, based on feedback from entities and the Core Team’s observations.

Provide Level 3 operational support to Group entities in the execution of the AppSec strategy, covering organization, operating models, processes, and the analysis / treatment of vulnerabilities.

Collaborate with solution providers to resolve service-impacting issues, managing related support tickets.

Take part in or lead Application Security governance committees , ensuring effective communication and alignment across the Group.

Create and update documentation such as standards, procedures, and reports.

Consolidate metrics and KPIs from entities to report on the Group’s overall Application Security posture

YOUR PROFILE AND SKILLS :

IT Risk and Cybersecurity (focus on Application Security) : Level 3 – Expert

Risk Knowledge & Awareness : Level 3 – Expert

Vulnerability Management & Offensive Security : Level 2 – Practice

Software Development, Code Review & Testing : Level 2 – Practice

Software Architecture Design : Level 2 – Practice

English : Mandatory (written and spoken).

Hybrid work model based in Lisbon or Porto .

If you feel this opportunity is for you, send your CV and join our team!