Apply on Employer Site

Acadia Insurance (a Berkley Company) · 2 months ago

Vulnerability Management Application Security Lead

US-DE-Wilmington

Full-time

Onsite

Senior Level

5+ years exp

Berkley Technology Services (BTS) is a technology solution provider for W. R. Berkley Corporation, focusing on innovative IT solutions. The Vulnerability Management Application Security Lead will work within the Information Security team to enhance application security efforts, manage compliance scanning processes, and guide stakeholders in vulnerability management services.

Commercial InsuranceInsurance

Responsibilities

Lead Security Initiatives: Spearhead and enhance our application security efforts, including penetration testing and static code analysis

Innovate and Optimize: Evaluate and implement improvements to our security tools and explore new technologies to strengthen our security posture

Code Analysis and Remediation: Lead projects to continuously analyze source code, identify vulnerabilities, and implement remediation strategies

Compliance Management: Oversee the enterprise-wide compliance scanning process to quickly identify and address potential risks

Stakeholder Communication: Regularly update and secure buy-in from global engineering, business operating units, security management, and senior leadership teams on the status of Application Security projects

Qualification

Vulnerability ManagementPenetration TestingStatic Code AnalysisSecurity ComplianceStakeholder EngagementData AnalysisTechnical ProficiencyProject LeadershipCommunication Skills

Required

Minimum of 5+ years in Information Security or a related field, with expertise in security compliance, penetration testing, vulnerability management, and static code analysis

Prior experience in project leadership or as a team lead is preferred

Bachelors Degree in Computer Science, Information Technology, Information Systems, or a related discipline. Equivalent experience and/or alternative qualifications will be considered

Skilled in commonly used penetration testing tools, web application scanning tools, and static code analysis tools (e.g., Veracode, Fortify, Checkmarx)

Proven ability to engage and secure buy-in from business, technical, and executive stakeholders