Application Security Expert - Information Systems

HCLTech is a global technology company, spread across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. We re powered by our people a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.

Our purpose is to bring together the best of technology and our people to supercharge progress for everyone, everywhere our clients, partners, their stakeholders, communities, and the planet. As a company, we are deeply focused on accelerating our ESG agenda. We are also creating technology-enabled sustainable solutions with and for our clients and partners. We embed ESG imperatives into every aspect of our business and ensure that the progress we supercharge is responsible, inclusive and beneficial to all our stakeholders in the long term. We have committed to achieving net zero by 2040.

To learn more about how we can supercharge progress for you, visit

Job Title- Application Security Expert - Information Systems

Location- Paris, France

Hybrid mode- 3-4 days week (Work from client location)

Years of relevant experience: +8 years

Overview:

The Expert in Application Security will provide expertise to the Information Systems Department and the Security team. The role involves risk analysis, security architecture approval, and integration of security into IT projects. The consultant will join a dynamic team and report to the head of Information Systems Security.

Responsibilities

• Conduct cyber risk analyses (security exceptions and TPRM)
• Approve security for application architectures
• Provide security expertise in IT projects (SecureByDesign, securing internet-exposed assets)
• Analyze vulnerabilities (SAST, SCA, DAST, Secret Detection)
• Execute operational controls (barometer and others)
• Manage security service offerings (e.g., DevSec pipeline, IAM solutions)
• Analyze gaps with standards and systemic risks
• Produce security indicators (KRI/KPI)
• Support the Information Systems Department and Security team
• Collaborate with cross-functional teams

Mandatory skills

• Knowledge of IAM/PAM and DEVSEC
• Expertise in security architecture and cyber risk analysis
• Proven expert experience in complex, regulated environments
• Understanding of matrix organizations
• Autonomy, initiative, and synthesis skills

Appreciated skills

• Communication, listening, and pedagogical abilities