Digital Security Strategist

We are actively seeking an experienced Application Security professional to lead security testing, vulnerability management, and threat mitigation efforts.

This role involves securing applications, mobile platforms, APIs, and cloud environments while ensuring compliance with industry standards and regulations.

• Security Testing: Perform source code analysis, static application security testing, dynamic application security testing, interactive application security testing, mobile security testing, and API security testing to identify and resolve vulnerabilities.
• Vulnerability Management: Conduct vulnerability assessment and penetration testing, prioritize vulnerabilities, and mitigate risks using threat modeling and OWASP Application Security Verification Standard.
• Cloud Security: Secure AWS and Azure environments, ensuring compliance with Centre for Internet Security Benchmarks and General Data Protection Regulation/Health Insurance Portability and Accountability Act.
• Compliance & Regulations: Ensure compliance with Payment Card Industry Data Security Standard, Health Insurance Portability and Accountability Act, General Data Protection Regulation, and other security frameworks.
• DevSecOps Integration: Integrate security into software development lifecycle, automate security checks within continuous integration and continuous deployment pipelines using Jenkins and Azure DevOps.
• Security Architecture: Design secure application architectures and advocate secure coding practices across teams.
• Leadership & Training: Lead security assessments, mentor junior team members, and conduct security awareness workshops.

Requirements:

• Technical Proficiency:
  • Legacy: Java, .NET; Modern: React, Node.js, Python, PHP, Ruby/Rails, and Angular.
  • CMS: Magento-Adobe, and Avocode.
• Cloud Skills: Expertise in AWS and Azure.
• Security & Compliance: Knowledge of OWASP Top 10, OWASP Application Security Verification Standard, Payment Card Industry Data Security Standard, Health Insurance Portability and Accountability Act, General Data Protection Regulation, National Institute of Standards and Technology, and Centre for Internet Security Benchmarks.
• Security Testing Expertise: Proficiency in source code analysis, static application security testing, dynamic application security testing, interactive application security testing, penetration testing, and threat modeling.
• DevSecOps & SDLC Integration: Experience in embedding security in CI/CD pipelines and secure SDLC practices.
• Soft Skills: Strong communication, leadership, and collaboration skills.

Preferred Certifications:

• CISSP, CEH, GWAPT, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate.

About the Role

As a key member of our digital quality engineering services company, you will play a vital role in securing our clients' digital assets and ensuring their compliance with industry standards and regulations. We are looking for an experienced Application Security professional who can lead security testing, vulnerability management, and threat mitigation efforts.

Our ideal candidate is highly skilled in source code analysis, static application security testing, dynamic application security testing, interactive application security testing, mobile security testing, and API security testing. They should also have expertise in AWS and Azure environments, as well as knowledge of OWASP Top 10, OWASP Application Security Verification Standard, and other relevant security frameworks.

If you are passionate about security and have experience in leading security assessments, mentoring junior team members, and conducting security awareness workshops, we encourage you to apply for this exciting opportunity.