Cybersecurity Engineer | Contract | Bank

Job Purpose:

• The person will be responsible for providing advisory to development / project teams on the security aspects of the SDLC (Software Development Lifecycle).

• The person is expected to evaluate new technologies and processes to improve Application Security outcomes.

• The person is expected to guide application teams on Secure SDLC activities and contribute improvements to existing tools and processes, such as: SAST, DAST, SCA, Security requirements, Secure Code Review and Developer application security training.

Job duties and responsibilities:

• Provide advisory for development / project teams on Application Security.

• Contribute to the improvements of our existing application security tools and processes:SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and secure coding guidelines.

• Provide advisory on application security tools and processes: SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and secure coding guidelines.

• Contribute to the improvements of Secure SDLC practices, such as Security Requirements, Secure Design and Secure Code Review.

Requirements:

• Bachelors degree in IT or any related discipline

• Proficient with programming & scripting languages such as: Java & Python

• Knowledge and experience in the modern software development practices (Agile, DevOps, DevSecOps)

• Knowledge and hans-on experience with DevSecOps processes and tooling, such as SAST, DAST, SCA and IAST.

• Understanding of OWASP Top 10, OWASP ASVS/MASVS

• Penetration testing experience is a plus

• Experience in Code Reviews and/or application security assessments is a plus

Interested candidates may send in their resume and cover letter directly to [email protected]

Hibah Bakhtavar | EA License No. 02C3423 | Personnel Registration No. R21103109