Description

You will perform complex security assessments and source code reviews within a large corporate environment.

Responsibilities

• Execute penetration testing and application security reviews across various domain areas.
• Perform static code analysis and software composition analysis to identify vulnerabilities.
• Review security assessment reports and provide technical guidance and feedback.
• Apply threat modelling, authentication, and authorization principles to application architectures.
• Communicate technical security outcomes to non-technical stakeholders.

Required Skills

• Minimum 7 years of experience in Security Testing, including Penetration Testing and Application Security roles.
• Proven experience in software development and software delivery models like DevOps and Waterfall.
• Expertise using vulnerability scanners, Static Code Analysis, and Software Composition Analysis tools.
• Deep understanding of transport security, authentication, authorization, threat modelling, and logging/monitoring.
• Demonstrable skillset exceeding OSCE or OSWE qualification standards.
• Tertiary degree in Electrical/Electronic, Computer, Network, or Software Engineering; Information/Cyber Security; or IT.
• Experience conducting security assessments in large corporate environments.

Preferred Skills

• Experience developing security policies, standards, and development guidelines.
• History of developing exploits and zero-day discoveries.
• Industry certifications such as OSCP, OSWE, CISSP, or CREST.

Key Skills

Education

Any Graduate