Application Security Analyst at BVNK

BVNK is seeking an Application Security Analyst to join their team in Spain. The Application Security Analyst will play a crucial role in fortifying BVNK's application security posture. This involves ensuring secure configurations, robust business logic, and adherence to security best practices across applications, cloud tools, and third-party integrations. The analyst collaborates closely with development, product, and other stakeholders, driving the implementation of security strategy and ensuring compliance with organizational policies and industry standards.

Role Involves:

• Collaborating with Engineering, Product and Development teams to include security in the business logic and fraud prevention.
• Ensuring rigorous reviews of application workflows and data flows before production releases.
• Approving and regularly auditing security configurations for applications, financial and cloud tools.
• Identifying, assessing, and mitigating risks tied to business logic, cloud integrations, and third-party systems.
• Maintaining and updating a central vulnerability register from audits, tests, and external research.
• Supporting Business Continuity Planning (BCP) by ensuring application security processes align with resilience goals.
• Collaborating with the Vendor Security and Risk Manager to oversee third-party security.
• Implementing and refining application security processes portions across Finance, Legal, IT, Engineering, Risk, and other teams.
• Contributing to developing and updating security policies, conducting risk assessments, and steering strategic security enhancements.
• Evaluating and implement security solutions, perform periodic system audits, and analyse data to inform improvements.

Requirements:

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• 2-4 years of experience in application security, cloud security, or related areas.
• Strong analytical, problem-solving skills, and attention to detail.
• Excellent collaboration and communication skills for cross-functional teamwork.
• Understanding of security risk assessment frameworks and compliance standards (e.g., ISO 27001, NIST).
• Proficiency in managing and reviewing cloud application configurations and third-party integrations.
• CISSP, CISM, CEH, or relevant application security certifications are a plus.

BVNK offers:

• Fair and competitive salary at every stage of your growth
• Meaningful ownership in the business through our employee option scheme
• Flexible working hours, with hybrid working at its heart
• Opportunities to travel to our offices around the world