Senior Analyst, Tech Grc m&a
ESTÉE LAUDER COMPANIES
New York, NY
The Estée Lauder Companies Inc. is one of the world's leading manufacturers, marketers, and sellers of quality skin care, makeup, fragrance, and hair care products, and is a steward of luxury and prestige brands globally. The company's products are sold in approximately 150 countries and territories under brand names including: Estée Lauder, Aramis, Clinique, Lab Series, Origins, M·A·C, La Mer, Bobbi Brown Cosmetics, Aveda, Jo Malone London, Bumble and bumble, Darphin Paris, TOM FORD, Smashbox, AERIN Beauty, Le Labo, Editions de Parfums Frédéric Malle, GLAMGLOW, KILIAN PARIS, Too Faced, Dr.Jart+, the DECIEM family of brands, including The Ordinary and NIOD, and BALMAIN Beauty.
Description This role will support the evangelization of an application security strategy under the direction of the Global Head of Application Security in support of ELC's strategic and tactical initiatives in application modernization, DevSecOps, artificial intelligence & robotics, multi cloud adoption, and multi site application development. This position will directly contribute to the overall global security of ELC's applications, under the direction of the Global Head of Application Security. This candidate will primarily be focused on ensuring security is built into the Software Development Life Cycle, and the delivery of trusted products and services to our clients, partners, and ELC IT/Security associates.
These responsibilities will be fulfilled by performing application security tests, developing and providing secure source code consultation services, and assisting the development communities with self service tools. A person in this position will work within a diverse and geographically disperse team, as well as, act as a coach and mentor for developing the skill sets of junior team members.
Must have excellent track record and proven ability to produce effective, innovative solutions at an enterprise scale. Must be constantly evaluating the evolving security, application and technology industries to be on top of the latest innovations and process refinements, making recommendations and influencing adoption by IT, ECR and the broader ELC community.
Main duties:
- Review current security processes used in our Software Engineering teams & develop optimization strategies.
- Work with the development teams to coordinate and perform vulnerability assessments through the use of automated and manual tools.
- Provide consulting & mentoring expertise to our Developers, DevOps, and Software Engineering teams in a dynamic environment to promote and implement the DevSecOps program across our organization.
- Ability to review and analyze vulnerability data to identify security risks to the organization's network, infrastructure, and application's and determine any reported vulnerabilities that are false positives.
- Provide the expertise to prepare security vulnerability and risk management reports for management and other key stakeholders.
- Ensure we deploy best practice Cloud Configuration and Security Management tools and processes into our Software Engineering teams.
- Provide leadership and teaming skills to coordinate remediation of vulnerabilities within established timeframes.
- Experience operating in agile development processes and integrating secure development practices into these models.
- Excellent programming and scripting skills in languages such as C#, C/C++, Java, JavaScript, PowerShell, Python, etc.
- Experience with APIs: REST, SOAP, SOA and other integrations
- Formal training in the primary development toolset: Tools, Code, Application Engine, SQL/DB Security
- Good knowledge and understanding of application security vulnerabilities (SANS, OWASP).
- Knowledge of Threat modelling and risk analysis.
- Candidate should be very thorough in internet technologies and highly versed with web development best practices.
- Strong analytical/problem solving skills and cross functional knowledge across multiple development and security disciplines.
- Understanding of Test Automation tools and frameworks such as SAST, DAST, IAST.
- Ability to communicate security related concepts to a broad range of technical and non technical staff.
- Must possess a high degree of integrity, be trustworthy, and have the ability to lead and inspire change.
- Previous software engineering/architecture experience (Java, C#,.Net, JavaScript) preferred.
- Understanding CI/CD pipelines covering source control, integration, and deployment (ex: Bitbucket, Jenkins, JIRA, Artifactory, Nexus, git).
- Knowledge in securing cloud deployment and containers (familiarity with Ansible, DeMisto, Docker, and/or Kubernetes).
- Some experience with development of RESTful and SOAP web services preferred.
- Understanding of advanced iterative Agile methodologies.
- Familiarity with micro services architecture and design Patterns.
Posted 2026-07-30
Recommended Jobs
CNC Operator
Envision Benefits Group LLC
North Tonawanda, NY
Job Description Job Description Description: A well-established metal fabrication and machining company is seeking a skilled CNC Operator to join its production team. This role is ideal for an e…
View Details
Posted 2026-07-05
Host
El Vez NY
New York, NY
James Beard award-winning restaurateur Stephen Starr's El Vez celebrates the festive soul of Mexican and Mexican-American culture, a true south-of-the-border spirit that manifests itself in the …
View Details
Posted 2026-07-09
Associate National Account Manager
Hachette Book Group
New York, NY
SUMMARY: HBG is looking for an Associate National Account Manager, to drive sales at educational wholesalers which service schools and libraries nationwide. This highly-organized individual will b…
View Details
Posted 2026-05-29
CHT, EMT, or Paramedic for Hyperbaric Tech Position
Hyperbaric Medical Solutions
Woodbury, NY
Job Description Job Description Salary: $25-$30 /hour DOE Company Description Hyperbaric Medical Solutions (HMS) is a free-standing provider of hyperbaric oxygen therapy (HBOT) with off…
View Details
Posted 2026-07-17
Director, Marketing Data Science
Zocdoc
New York, NY
Our Mission Healthcare should work for patients, but it doesn’t. In their time of need, they call down outdated insurance directories. Then wait on hold. Then wait weeks for the privilege of a visit. …
View Details
Posted 2026-07-30
Store Manager
Jetro / Restaurant Depot
Brewster, NY
Job Summary The Store Manager is responsible for overseeing all aspects of Retail, Grocery and Warehouse operations, including financial performance, compliance, inventory management, customer servi…
View Details
Posted 2026-07-03
Advanced Practice Provider Cardiac Critical Care (Relocation Provided)
Dell Medical School
Albany, NY
General Notes Dell Medical School in conjunction with Dell Children‘s Medical Center of Central Texas (DCMCCT), is seeking Physician Assistants with cardiac critical care credentials to be part of t…
View Details
Posted 2026-06-28
Healthcare Service Representative
Dentserv Dental Services
New York, NY
Our dental practice has been providing the highest quality dental care in Skilled Nursing Facilities and other institutional healthcare settings for over 40 years. We are currently searching for a ta…
View Details
Posted 2026-01-15
Senior Software Engineer
Trust In SODA
New York, NY
Senior Software Engineer USD $220,000 - $270,000 meaningful equity | New York | 5 days onsite Soda has partnered with an AI infrastructure company founded by leaders behind one of the earlies…
View Details
Posted 2026-05-07
Associate Producer, WQXR
New York Public Radio
New York, NY
Description Associate Producer, WQXR WQXR seeks a full-time Associate Producer. Reporting to the Assistant Program Director, the role will primarily support WQXR’s Programming team. In addition to…
View Details
Posted 2026-07-17