Senior Specialist, Security Verification & Testing

Responsibilities

Perform secure design review, threat modelling, secure code review, penetration testing and assist developers in triaging scan results.; Develop comprehensive and accurate reports and presentations for both technical and executive audiences and make recommendations for security improvements.; Effectively communicate findings and strategy to stakeholders including technical staff and executive leadership.; Develop and socialise security standards, training courses on secure design best practices, related to cryptography, authentication, access control, etc.; Lead engagements with Engineering teams from scoping through remediation, and mentoring less experienced staff.

Requirements

Background in coding, fluent in several modern programming languages.; Excellent understanding of secure design and coding best practices.; Experience using scanning tools for mobile, API and web application security testing.; At least 6 years experience with a minimum of 3 of the following:; Strong experience with AWS, Azure or GCP.; Design of highly-available and highly-secure solutions in the financial sector.; Design of container-based infrastructures in the cloud.; Development of mobile applications, RESTful APIs, web applications.; Secure code review of mobile applications, RESTful APIs, web applications.; Penetration testing of mobile applications, RESTful APIs, web applications.