Application Security & Identity Access Management Specialist

About the role

This position is part of a Security Joint Venture between CyberCX and Accenture and focuses on protecting enterprise‑level applications and systems. The specialist will design, implement and test security controls while supporting identity and access management initiatives across multiple locations.

Key responsibilities

• Assess application vulnerabilities using manual and automated tools such as SAST, DAST, IAST and RASP.
• Develop and enforce secure coding practices, guidelines and remediation for OWASP Top 10 and SANS Top 25 findings.
• Implement and maintain IAM platforms (Okta, Ping Identity, ForgeRock, Microsoft Active Directory) and configure RBAC, PBAC and fine‑grained access policies.
• Support privileged access management, identity proofing, authentication, federation and single‑sign‑on solutions.
• Conduct security assessments, penetration tests and vulnerability scans across web applications, APIs and infrastructure using black‑box, white‑box and grey‑box techniques.
• Design secure network architectures, including firewalls, IPS, VPNs and micro‑segmentation, ensuring compliance with industry standards.

Required profile

• Mid‑level professional with solid experience in application security and IAM.
• Proven ability to work with development, DevSecOps and IT teams to embed security into the SDLC.
• Strong analytical mindset with experience delivering detailed security reports and mitigation recommendations.
• Familiarity with industry frameworks and standards for security testing and network protection.

Required skills

• SAST, DAST, IAST, RASP
• OWASP Top 10, SANS Top 25
• Okta, Ping Identity, ForgeRock, Microsoft Active Directory
• RBAC, PBAC, PAM
• Identity proofing, authentication, federation, single‑sign‑on
• Black‑box, white‑box, grey‑box testing
• Firewalls, intrusion prevention systems, VPN, micro‑segmentation