AppSec Expert

# App Sec Expert* Home* App Sec Expert* November 11, 2026* 0 Comments* By Roberte Okoya

Context

We are seeking an experienced application security expert for our client to join the App Sec team within the Operational Security and Security Coordinators department of the IT division.

The role involves implementing and managing application security solutions, handling cybersecurity incidents, operational monitoring, and tracking the App Sec security posture.

• Main Responsibilities
• Contribute to the implementation and management of Application Security Testing (AST) solutions.
• Participate in the handling of confirmed cybersecurity incidents related to the App Sec scope.
• Participate in daily operational monitoring processes for application security.
• Contribute to awareness campaigns promoting best practices in secure development.
• Ensure reporting of the App Sec security posture: indicators, vulnerability monitoring, and committee meetings.
• Required Technical Skills
• Application

Security: proven experience in identifying, qualifying, and remediating vulnerabilities in web applications and APIs; ability to analyze test results and support development teams in implementing fixes.

• Secure

Development: experience in code review and mastery of input validation principles, access control, session management, secrets protection, and logging.

Ability to translate findings into actionable technical recommendations.

• AST Solutions: Operational experience with SAST (Static Code Analysis), DAST (Dynamic Application Testing), and SCA (Component and Dependency Analysis), as well as RASP solutions.

Ability to deploy, configure, and maintain these solutions, adapt detection rules, and reduce false positives.

• Python Automation: Proficiency in developing and maintaining security scripts and tools; API management, scan result processing, error handling, code testing, and documentation.
• Dev Sec

Ops Integration: Ability to integrate security controls into CI/CD pipelines and Git workflows, define risk-appropriate control criteria, and support their adoption by teams.

• Vulnerability

Management: Alert qualification, deduplication, prioritization based on criticality, exposure, and application context; monitoring of remediation plans and verification of fixes.

• Web and API Fundamentals: Good understanding of HTTP/HTTPS, web architectures, and authentication and authorization mechanisms.

Ability to analyze application exchanges and technical logs.

• Operation and reporting: maintaining App Sec tools in operational condition, analyzing incidents within the application scope, and producing reliable indicators on control coverage and vulnerability monitoring.

Additional skills considered valuable

• Application protection: knowledge and experience with WAF solutions, with the ability to analyze alerts and contribute to rule adjustments in coordination with the relevant teams.
• Penetration testing: experience conducting web and API audits within an authorized framework; reporting findings, recommendations for remediation, and verification of their implementation.
• OWASP frameworks: familiarity with the Top 10 Web and API risks, as well as with ASVS for structuring secure development requirements and technical verifications.
• Secure design: experience with threat modeling and design reviews to identify risks upstream of development.
• Technical environments: proficiency with Linux and containers; ability to read code in languages other than Python, depending on the technologies within the scope.
• Awareness: ability to lead secure development workshops and produce practical materials tailored to developers. Required Profile
• Background: Experienced to senior profile in application security, with concrete achievements in the operation of AST tools, automation, and remediation support.

Software development experience is an asset.

• Education: Higher education in computer science or cybersecurity, or equivalent professional experience demonstrating mastery of the expected skills.
• Autonomy and Rigor: Ability to manage a project from start to finish, document actions performed, and prioritize tasks according to risks and operational constraints.
• Analytical and
• Pragmatic

Approach: Ability to distinguish relevant alerts from false positives and propose applicable fixes, balancing security requirements and development constraints.

• Collaboration and
• Teaching

Skills: Ability to work with developers, operations teams, architects, and security coordinators; ease in explaining risks and promoting best practices.

• Communication: Excellent writing skills for technical documentation and reports; ability to present findings and points of attention to committees.

Technical English proficiency to consult security documentation and publications.

• Professional conduct: respect for confidentiality, testing authorization framework, and incident management procedures; customer service orientation and ability to escalate issues appropriately.
• Expected deliverables

: • Documentation of technical activities.

• Contribution to the team's weekly report.

Application: CV + cover letter + copies of diplomas to be sent to contact@keoni. fr Founded in 2008, Kéoni Consulting is an IT consulting and engineering firm specializing in the banking, financial markets, insurance, and industrial sectors.

We are the partner for major accounts in their digital transformation.

We help them transform their business model, align their operational processes, select the best technologies, and mitigate and overcome the risks associated with digitalization.

Kéoni Consulting helps companies to

• Make a difference
• , innovate and create

, reinvent their business, satisfy customers, gain a competitive advantage, become the leader in their sector, and become the leader in their sector.

Our services cover the entire information systems lifecycle (Project Management, Business Analysis Consulting, Design, Implementation, Maintenance, Production, and Operations).**Job

• Category:** Digital Transformation**Job
• Type:** Full Time**Work location:** Europe