Application Security Lead at Lemana PRO (Leroy Merlin)

Lemana PRO (Leroy Merlin) is looking for an Application Security Lead.

Responsibilities:

• Participate in application architecture design processes from an information security perspective;
• Participate in an international working group to define global product security requirements for the group;
• Develop playbooks for ensuring product cyber resilience;
• Organize control over the implementation of security requirements for key infrastructure services;
• Find an effective compromise between security and business requirements;
• Train non-specialist employees on the basics of secure architecture development;
• Participate in technical architecture committees as information security experts;
• Participate in monolith decomposition to ensure the security of implemented business processes.

Candidate Profile:

• Higher technical education (IT, IS);
• 3-5 years of experience in a similar role;
• Knowledge of the information security market, its vendors, and information protection technologies;
• Experience in building application architecture considering Security by Design and Design for Failure approaches;
• Understanding of secure application development principles in accordance with OWASP ASVS, WSTG;
• Understanding of microservices architecture principles and microservices security approaches;
• Understanding of PCI DSS, the core principles of the Zero Trust concept, and the ability to build applications considering these principles;
• Understanding of security specifics for the applied technology stack;
• Knowledge of network security technologies, cloud security, virtualization and containerization environments (Docker, Kubernetes);
• English language proficiency not lower than intermediate;
• Knowledge of TOGAF methodology basics will be an advantage;
• Openness;
• Communication skills and the ability to explain complex concepts in simple terms;
• Result-oriented.

Conditions:

• Flexible bonus system;
• Extended social package: Voluntary Medical Insurance with dental care from the first month of employment, psychologist services, life insurance, meal allowance, and mobile communication reimbursement;
• Work in a company with a developed engineering culture;
• Internal professional communities and events;
• Autonomy in work, the opportunity to change rules, make mistakes, and create new things;
• Opportunities for professional growth, development programs for employees;
• Corporate training and access to a knowledge base;
• Hybrid/remote work format;
• Modern office located a 2-minute walk from the MCC ZIL station.