Senior Cybersecurity Lead Analyst

Key Responsibilities

• Lead application & product security across internal and cloud-based apps; drive Secure SDLC / DevSecOps with engineering.
• Own penetration testing for web, API, cloud, and infrastructure – scope, test, report, track remediation, retest.
• Run vulnerability management with risk-based prioritisation (exploitability, exposure, impact, asset criticality) and remediation to closure.
• Provide cloud security guidance for AWS and/or Azure – review IAM, network, logging, encryption, and CI/CD security.
• Integrate security testing and automation into CI/CD; improve secure-coding practices and tooling.
• Secure & govern AI: control and monitor AI/LLM and AI-assisted development risk across the platform (see AI Security & Governance below).
• Review designs to catch risk early (architecture/design reviews, threat modelling).
• Lead & collaborate: mentor security staff, act as SME, and partner with Engineering, DevOps, Architecture, and Product.
• Governance: support ISO 27001 / SOC 2 controls, audits and evidence, and security metrics/reporting.

AI Security & Governance

Responsibilities

• Flexible work arrangements for better work-life balance
• Generous Paid Leaves (Annual, Sick, Compassionate, Local Public, Marriage, Maternity, Paternity, Medical leave)
• Medical benefits ( Insurance and Annual Health Check-up)
• Pension and Insurance Policies (Group Term Life Insurance, Group Personal Accident Insurance, Travel Insurance)
• Training and Development Assistance (Training Sponsorship, On-The-Job Training, Training Programme)
• Additional Benefits (Long Service Awards, Mobile Phone Reimbursement)
• Company bonus/Profit share.
• *Benefits may vary based on position, tenure/contract/grade level*
• DNV is an Equal Opportunity Employer and gives consideration for employment to qualified applicants without regard to gender, religion, race, national or ethnic origin, cultural background, social group, disability, sexual orientation, gender identity, marital status, age or political opinion. Diversity is fundamental to our culture and we invite you to be part of this diversity.

Must Have Experience

• 8–10+ years in cybersecurity, with strong hands-on application security and penetration testing.
• Web and API security testing; solid command of OWASP Top 10 and OWASP API Security Top 10.
• Led penetration testing and vulnerability management activities end-to-end.
• Secure SDLC / DevSecOps and CI/CD security.
• AWS and/or Azure security, including cloud architecture and control reviews.
• Strong communication, stakeholder management, and technical leadership.

Preferred

Education