Application Security Manager, Virtual

Company: Aon
Location: Houston
Posted on: January 14, 2021

Job Description:

Aon is looking for a Manager, Application Security, VirtualAs part of an industry-leading team, you will help empower results for our clients by delivering innovative and effective solutions in our Cyber Security Team within Global Security Services. This position is virtual in the United States.--It's an exciting time to be at Aon!-- We are seeking a motivated and innovative Application Security Senior Manager to join our growing Cybersecurity organization. The Manager, Application Security, reporting to the Application Security Leader, will work closely with various application teams to help them integrate security in Software Development Lifecycle and manage application security risks.The Role will primarily focus on Static Application Security testing of Aon applications and integrating SAST/DAST into DevOps as a key task.A successful candidate should be able to demonstrate experience in automating security at scale by building and implementing static & dynamic analysis tools and integrating security into the Software Development Lifecycle.--Your impact as a Manager, Application SecurityCore Responsibilities:

• Manage security assessment queue and conducting application security assessment such as Static & Dynamic Analysis
• Overall execution of the plans and procedures related to Static Analysis integration with CI/CD for Aon
• Manage the relationship with third-party vendors providing services to support application security assessments
• Oversee reporting that will provide analytics and metrics to Cybersecurity leadership
• Assess applications and threat landscape
• Demonstrate competitiveness to work at a high technical level of Web, Thick Client, Mobile, Web Services application penetration testing and provide expertise for identifying security vulnerabilities, develop documentations, drive remediation and work with others to assist the education of secure software development lifecycle
• Acts as a coach for application engineers on advanced security concepts and provide remediation guidance
• Assists in the development of application threat modelling and internal software security champion program
• Support governance and compliance audits related to PCI, HIPAA, Sox and other regulations
• Help with incident response when needed---Required Experience:
  • 6+ years of relevant experience working in Application Security
  • Subject Matter Expertise in Application Security and manual source code reviews
  • Strong work ethic with the ability to effectively multitask in a fast-paced environment
  • Basic understanding of common internet protocols at the application, transport and network layers (e.g., HTTP, FTP, SSH, SMTP)
  • Advanced level of understanding on Static Analysis tools (IBM Source Scan, HP Fortify, Checkmark) and their integration with SDLC/DevOps.
  • Advanced level understanding of OWASP TOP 10 and SANS TOP 25 vulnerabilities
  • Advanced level knowledge of at least one common compiled language (e.g., C, C++, Java, .NET) and one scripting language (e.g., Perl, Bash, Python, Ruby)
  • Advanced level knowledge of JavaScript, HTML etc.
  • Intermediate level web programming ability (e.g., ASP.NET, PHP, Perl CGI, or Java)
  • Advanced level understanding of the cryptography concepts.
  • Should have understanding of DevOps (CI/CD, Release/ deployment automation), public cloud (AWS, Azure, GCP), cloud native technologies (Containers, Server less), microservices architecture etc.Preferred Experience:
    • Security certifications like CISSP, OSCP, CEH or equivalent strongly preferred.
    • Excellent problem-solving and critical-thinking skills
    • Understanding of emerging technologies and corresponding security threats
    • Self-motivated, flexible, with a 'can do' attitude.
    • Ability to pick up business knowledge, new technology areas, new processes/methodologies and apply in day-to-day work
    • Multi-cultural approach, and ability to interface with all levels of the organization
    • Strong analytical, conceptual and problem-solving skills
    • Accountability and reliability, personal involvement
    • Pro-activity, initiative, and autonomyWe offer youA competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization. --Our Colleague Experience:From helping clients gain access to capital after natural disasters, to creating access to health care and retirement for millions, Aon colleagues empower results for our clients, communities, and each other every day.-- They make a difference, work with the best, own their potential, and value one another.-- This is the Aon Colleague Experience, defining what it means to work at Aon and realizing our vision of empowering human and economic possibility. To learn more visit Aon Colleague Experience.--About Aon:Aon plc (NYSE: AON) is a leading global professional services firm providing a broad range of risk, retirement and health solutions. Our 50,000 colleagues in 120 countries empower results for clients by using proprietary data and analytics to deliver insights that reduce volatility and improve performance.By applying for a position with Aon, you understand that, should you be made an offer, it will be contingent on your undergoing and successfully completing a background check consistent with Aon's employment policies. Background checks may include some or all of the following based on the nature of the position: SSN/SIN validation, education verification, employment verification, and criminal check, search against global sanctions and government watch lists, fingerprint verification, credit check, and/or drug test.-- You will be notified during the hiring process which checks are required by the position.Aon provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, or domestic partner status.-- Aon is committed to a diverse workforce and is an affirmative action employer. --DISCLAIMER: Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.-- 2477097

Keywords: Aon, Houston , Application Security Manager, Virtual, Executive , Houston, Texas