Cybersecurity Engineer – Application Security

About the role

As a Cyber Security Engineer you will join the Cyber Digital & Fraud security team within the CDF – CISO Bureau, the central cybersecurity department of BNP Paribas. You will be responsible for safeguarding a wide portfolio of applications by conducting security reviews, analysing scanner and intrusion‑test reports, and guiding remediation efforts.

Key responsibilities

• Perform application security reviews in line with Group requirements.
• Support development and IT teams in implementing cybersecurity controls.
• Analyse security reports from vulnerability scanners and penetration tests.
• Assist in creating and tracking vulnerability remediation plans.
• Provide IT and cyber risk advisory to stakeholders.
• Prepare risk reports, KPI dashboards and operational‑resilience metrics.
• Contribute to classification of applications based on confidentiality, integrity, availability and traceability.

Required profile

• Proven experience in IT risk and cyber security within a financial institution.
• Strong understanding of application security concepts and cyber‑threat landscape.
• Ability to communicate risk findings and recommendations to technical and business audiences.
• Self‑motivated, detail‑oriented and able to work under time constraints.

Required skills

• Application Security
• Vulnerability Scanning
• Intrusion / Penetration Testing
• IT Risk Analysis and Management
• Cyber Resilience and Business Continuity concepts
• Governance, Risk & Compliance (GRC) frameworks