Senior Application Security
Pubblicato il 15-08-2026 - Fineco Bank in Milano
Company Description
Fineco Bank is a leading European bank with a 20 years history and a fully digital DNA with a branchless approach since the start. Fineco is one of the banks with the widest products range available. We have developed a truly one-stop-solution which includes trading, investment and payment services. We have developed a 100% proprietary platform for trading and investment which covers all customer needs from trading listed and OTC product to investment product such as mutual funds and ETF. In addition to this we also offer banking and payment solution for domestic and international demand.
Company Description
Fineco Bank is a leading European bank with a 20 years history and a fully digital DNA with a branchless approach since the start. Fineco is one of the banks with the widest products range available. We have developed a truly one-stop-solution which includes trading, investment and payment services.
We have developed a 100% proprietary platform for trading and investment which covers all customer needs from trading listed and OTC product to investment product such as mutual funds and ETF. In addition to this we also offer banking and payment solution for domestic and international demand.
Position
La figura entra nell’ICT & Security Office come riferimento tecnico per la sicurezza applicativa e l’integrazione della security nelle pipeline di sviluppo. Lavora a stretto contatto con i team di sviluppo, il SOC e le funzioni di governance, con responsabilità diretta sulla qualità e la sicurezza del software prodotto dalla Banca.
La Risorsa Dovrà
- Condurre attività di threat modeling applicativo e security review su architetture software, API e microservizi, integrandosi strutturalmente nei cicli di sviluppo e rilascio.
- Progettare, implementare e manutenere la toolchain di sicurezza nelle pipeline CI/CD: SAST, DAST, SCA, container image scanning, secrets detection.
- Eseguire secure code review su componenti critiche, identificando vulnerabilit