Senior Application Security Analyst

Mission Overview:

Keystone Solutions is seeking a Senior Application Security Analyst focused on risk management for a consultancy mission at a client site. The client manages a portfolio of approximately 800 applications, including nearly 400 web applications, utilizing various technologies and providers. A lack of proper lifecycle management can lead to significant risks, including service interruptions, data compromise, and increased technical debt.

Key Responsibilities:

The selected candidate will be responsible for managing risk and requirements within the Secure Application Lifecycle Management (SALM) framework. This includes:

• Assessing the criticality of applications and determining applicable security controls.
• Conducting risk analyses and monitoring agreed measures according to the established methodology.
• Defining security standards and practices for applications.
• Integrating security controls into projects and DevSecOps/CI/CD pipelines, including SAST, DAST, SCA, vulnerability scans, and penetration testing.
• Monitoring exceptions, residual risks, and recommendations prior to production deployment.
• Tracking vulnerabilities, obsolescence, and decommissioning of applications.
• Advising project teams, developers, architects, and operational staff.

Behavioral Competencies:

• Analytical mindset: Ability to structure complex situations and identify priority risks.
• Pragmatism: Proposing proportionate, realistic, and verifiable measures.
• Pedagogy: Making security requirements understandable for projects and business units.
• Rigor: Documenting assumptions, decisions, evidence, and residual risks.
• Autonomy: Managing multiple files simultaneously.
• Collaboration: Working effectively with developers, architects, DevSecOps, operations, and suppliers.

Why Join Keystone Solutions:

As a consultant with Keystone Solutions, you will engage in dynamic projects that offer diverse challenges across various client environments. This role provides turbo-charged learning opportunities and a commitment to career growth within our framework. Being a

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

Duration: 04/01/2027 - 03/01/2028 12 months • (full time)

Skills required:

• Accompagnement de projets : exigences, revues, dérogations, risques résiduels et avis de sécurité
• (mandatory) - Level: T3 - Senior - Most recent: Any time
• Analyse de risques applicatifs, identification des scénarios de menace et définition de mesures de traitement
• (mandatory) - Level: T3 - Senior - Most recent: Any time
• Communication et vulgarisation auprès des chefs de projet, architectes, développeurs, métiers et fournisseurs
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Documentation, traçabilité des décisions et utilisation d’outils de suivi ou de GRC - Level: T1 - Junior - Most recent: Any time
• Méthodes de modélisation des menaces et référentiels : OWASP, STRIDE, ISO 27005, NIST SSDF, NIS2 et CyFun
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time

Language requirements:

French
(mandatory)
Level Proficiency (C2)