Security Analyst (CXM)Verified as a real position

Who we’re looking for

• Familiarity with Wiz would be highly beneficial
• Knowledge of code repositories and security tooling, such as GitHub, GitLab, and Bitbucket
• Experience with OneTrust is a plus
• Understanding of cloud infrastructure across AWS, Azure, or GCP
• Security-related certifications or training such as CompTIA Security+, CISM, or Network+ are a plus

What you’ll do

• Conduct product security assessments for existing and new products, reviewing them against defined security requirements and feeding identified risks, missing controls, and vulnerabilities back into the project process
• Partner with Product and DevOps teams to prioritise and support remediation plans for weaknesses and vulnerabilities
• Assist with the risk management process across the practice area, helping identify and assess technical risks
• Work with the Cyber Operations team to ensure vulnerabilities are raised to the appropriate product teams and followed through to remediation, including support for incident handling where needed
• Ensure third-party security assessments are completed for the practice area as required
• Collaborate with the wider Security function, including Cyber Operations, Security Architecture, Pen Testing and Risk teams
• Build strong working relationships with business and development stakeholders across technical and non-technical environments
• Apply knowledge of secure software development and the SDLC, including security controls such as secrets scanning, dependency scanning, and SAST
• Support the embedding of security early in the lifecycle through practical guidance on secure design, coding practices, and related security principles
• Respond to client RFIs and support due diligence activities by providing security information and evidence as required
• Analyse issues from multiple perspectives to help drive effective outcomes for stakeholders

About the position

As a Security Analyst (CXM), you will play a key role in helping teams build and maintain secure applications and products across the practice area. Working as part of the Global Practices Security team, you will look after client-facing technology and the products being built, supporting day-to-day security activities across secure development processes, security testing and penetration testing, vulnerability management, and secure architecture. You will assess current and new products against security requirements, support risk management activities, and help drive the remediation of identified weaknesses and vulnerabilities. This role works closely with Product, DevOps, Cyber Operations, Security Architecture, Project, Pen Testing and Risk teams to embed security early in the software development lifecycle. In this role, you will apply strong technical security knowledge, manage stakeholders effectively, and drive practical security outcomes.

Benefits

• 5 weeks of vacation
• 2 Volunteering days to share the kindness of your heart with others
• Mental Health: Benefit from 3 extra wellness days on top of your vacation days and a Mental Health First Aider and Employee Assistance program to support your well-being.
• Flexible working hours and home office possibility
• Hybrid working – we combine flexibility with in-person collaboration, with an expectation of 1 day per week/ 4 days per month in the office
• Full access to Dentsu Academy, our global online learning platform
• Dog-friendly office
• Edenred meal vouchers and cafeteria points
• Team events: company parties, breakfasts, etc.
• Snacks and drinks at the office
• Referral bonus program
• Laptop + equipment
• Corporate mobile subscription
• Flexible hybrid home office working conditions.