Cybersecurity Assurance Specialist - #1132132

Make an impact by

• Conduct security assessments on applications and systems.

• Conduct security architecture reviews to evaluate the design and implementation of security controls within systems and networks.

• Perform security testing on web applications and APIs.

• Recommend mitigations and required implementations to ensure that systems are secure.

• Review and track remediations and security deviations to their closure.

• Collaborate with tech and product teams to ensure security controls are reviewed and implemented throughout the SDLC.

• Managed security issues identified from third party services and vendor assessments.

• Manage security findings from bug bounty program with businesses, and external hunters

• Manage security issues identified from attack surface assessment tools

• Be the AppSec subject matter expert and collaborate with business, infrastructure, application teams to continuously enhance the security posturing of applications and systems

• Work with and manage the engagements with internal & external pen testers, red teaming exercise.

Skill for Success

• Degree/Diploma or higher in Computer Science, Information Systems or equivalent.

• Minimum 5+ years of experience in application security, penetration testing, security architecture or related field.

• Security certification such as OSCP, CISSP, SANS GIAC Security Certifications or others is a plus.

• Ability to correlate enterprise risk with suitable administrative, or technical security controls.

• Experience in pen test, and vulnerability assessment tools (e.g., Burp, ZAP, Nessus) and secure coding.

• Experience managing bug bounty programs and attack surface management tools.