Security Vulnerability Analyst

About the role

We are looking for a detail‑oriented Security Vulnerability Analyst to join the application security team of a leading banking client. The analyst will act as the bridge between security findings and development teams, ensuring that identified vulnerabilities are understood, prioritized and remediated efficiently across core banking applications.

Key responsibilities

• Review and interpret Vulnerability Assessment (VA) reports generated for the bank’s applications and systems.
• Analyze each finding to determine root cause, severity, and potential impact on the codebase.
• Advise developers on secure coding practices and remediation approaches for identified issues.
• Work directly with development teams to fix VA‑identified vulnerabilities, providing hands‑on guidance when needed.
• Track remediation status and report progress to the Head of Security and IT Systems.
• Liaise with security leadership on emerging threats, risk prioritization, and remediation timelines.
• Stay current on secure coding standards, OWASP Top 10, and relevant security tooling.
• Support periodic re‑testing to confirm that vulnerabilities have been resolved.

Required profile

• Bachelor’s degree in Computer Science, Information Technology or a related field, or equivalent professional qualification.
• 1–3 years of experience in application security, secure coding, or vulnerability management.
• Familiarity with reading and interpreting VA or penetration‑testing reports.
• Experience working in banking or financial‑services application environments is a plus.

Required skills

• Secure coding in Java and/or .NET.
• Experience with Fortify or similar SAST tools.
• Knowledge of common vulnerability categories (e.g., injection flaws, authentication issues, insecure configurations).
• Understanding of OWASP Top 10 and secure coding standards.
• Exposure to Finacle Scripts.
• Ability to communicate technical security issues clearly to developers and non‑technical stakeholders.