BNP Paribas

BNP Paribas operates with dedicated security teams that cooperate locally, regionally, and globally within the Group. A local CISO oversees the setup and maintains the security policies framework. The company emphasizes application security practices such as threat modeling and understanding security architecture key concepts.

BNP Paribas job postings indicate active vulnerability remediation workflows, including defining and monitoring remediation plans and prioritizing efforts, suggesting potential triage and backlog challenges. The company also emphasizes developer enablement through extensive cybersecurity training programs. However, no public, company-authored evidence was found regarding the adoption of AI coding assistants that could introduce velocity-driven security risks.

BNP Paribas's AppSec initiatives include threat modeling and focusing on security architecture key concepts. They perform penetration testing for web, API, and mobile applications. There is also an emphasis on cloud security, specifically with GCP and AWS, and container security, including Docker and Anchore.

BNP Paribas has dedicated security teams that operate locally, regionally, and globally. A local CISO is in place to manage security policies. The company is actively hiring for roles such as "IT Cybersecurity Manager", "Security Tester", and "Application Production Support - Vulnerabilities and patching Experts", indicating a focus on vulnerability management, penetration testing, cloud and container security. The company has over 10,001 employees globally.