Senior Lead Application Security Analyst

Senior Lead Application Security Analyst

ADP is hiring a Sr. Lead Application Security Analyst. 

In this position, you'll be responsible for assessing the security of ADP applications by performing dynamic and static application security assessments.

Lead comprehensive security assessments across a variety of platforms, including Gen AI, web, mobile, and server-based applications, ensuring robust security protocols.

Location: Roseland, NJ (Hybrid) or Alpharetta, GA

Unlock Your Career Potential: Global Security Organization at ADP. Do you have a passion for going on the offensive to safeguard critical information? As ADP's Global Security Organization (GSO), we know that our clients rely on us for human capital management solutions, but beyond that, they entrust us with one of their most valuable assets -- their employee data.

We are honored by this trust and are laser focused on securing data at every step in the information lifecycle, ensuring integrity, confidentiality and compliance with industry and government regulations at all times.

From the cloud to the data center and across every emerging device, you'll join a team of experts in the GSO who are always staying one step ahead in this ever-changing world of data by continually evolving our strategies and technologies to protect ADP and our clients.

Like what you see?  Apply now!

Learn more about ADP at tech.adp.com/careers

RESPONSIBILITIES:

• Design and implement advanced testing strategies for Gen AI applications, leveraging cutting-edge technologies and methodologies. 
• Perform penetration testing of GenAI use cases and other applications
• Work with vendor and internal teams to mature GenAI runtime protection technologies by identifying gaps in third party solutions that analyze prompts and outputs
• Develop processes to evaluate app-level GenAI vulnerability results for broader protection in GenAI runtime protection solutions (e.g. block vs. inform specific prompts or outputs)
• Create prompt test cases for GenAI runtime solutions and work with vendors and internal teams to identify means to block unwanted responses via RegEx and other logic-based approaches
• Work with leadership to define and collect metadata for GenAI application that helps to assist in measuring risk and fine tuning GenAI runtime controls
• Evaluate the severity of vulnerabilities in accordance with industry standards, documenting findings with detailed proof of concepts as needed.
• Collaborate with development teams to elucidate identified vulnerabilities, providing insights and guidance for remediation.
• Propose tailored security enhancements for each application, considering unique requirements and architecture.
• Offer mentorship and technical leadership to junior application security analysts, fostering a culture of continuous learning and development.

To Succeed in This Role:

• Bachelor's degree or equivalent.
• A plus to have a degree in computer science, computer engineering, or information technology, complemented by 5 to 8 years of experience in application security.
• Proficiency in penetration testing of Gen AI applications and LLMs, as well as web and mobile platforms, with a strong understanding of REST/SOAP APIs.
• Familiarity with String manipulation and validation inclusive of RegEx and content encoding with the ability to develop logic to validate prompt and response content for GenAI runtime
• A background in assessing the security of Thick-client and Embedded applications is highly desirable.
• Familiarity with AGILE methodologies and the ability to adapt to fast-paced, evolving project requirements.
• Competence in risk assessment and the ability to articulate the implications of vulnerabilities within an enterprise context.
• Demonstrated ability to craft proof of concepts and exploits, coupled with a thorough understanding of exploitation techniques.
• Expertise in programming languages such as Python or Ruby, with additional experience in Java or .Net being beneficial.
• Exceptional problem-solving abilities, excellent communication skills, and a proven track record of effective teamwork, particularly in remote settings.
• A proactive and self-motivated approach, with a commitment to maintaining a positive work environment and the ability to operate independently when required.

YOU'LL LOVE WORKING HERE BECAUSE YOU CAN:

• Have courageous team collaboration. Courage comes from how associates are willing to have difficult conversations, speak up, be an owner, and challenge one another's ideas to net out the best solution.
• Deliver at epic scale. We deliver real user outcomes using strong judgment and good instincts. We're obsessed with the art of achieving simplicity with a focus on client happiness and productivity.
• Be surrounded by curious learners. We align ourselves with other smart people in an environment where we grow and elevate one another to the next level. We encourage our associates to listen, stay agile, and learn from mistakes.
• Act like an owner & doer. Mission-driven and committed to leading change, you will be encouraged to take on any challenge and solve complex problems. No tasks are beneath or too great for us. We are hands-on and willing to master our craft.
• Give back to others. Always do the right thing for our clients and our community and humbly give back to the community where we live and work. Support our associates in times of need through ADP's Philanthropic Foundation.
• Join a company committed to equality and equity. Our goal is to impact lasting change through our actions.

What are you waiting for?  Apply today!

Find out why people come to ADP and why they stay: https://youtu.be/ODb8lxBrxrY

(ADA version: https://youtu.be/IQjUCA8SOoA )

#LI-SD4

#LI-Hybrid