Security Verification & Testing Specialist

Perform secure design review, threat modelling, secure code review, penetration testing and assist developers in triaging scan results. Develop comprehensive and accurate reports and presentations for both technical and executive audiences and make recommendations for security improvements. Effectively communicate findings and strategy to stakeholders including technical staff and executive leadership. Develop and socialise security standards, training courses on secure design best practices, related to cryptography, authentication, access control, etc. Lead engagements with Engineering teams from scoping through remediation, and mentoring less experienced staff.

Responsibilities

Perform secure design review, threat modelling, secure code review, penetration testing and assist developers in triaging scan results; Develop comprehensive and accurate reports and presentations for both technical and executive audiences and make recommendations for security improvements; Effectively communicate findings and strategy to stakeholders including technical staff and executive leadership; Develop and socialise security standards, training courses on secure design best practices, related to cryptography, authentication, access control, etc.; Lead engagements with Engineering teams from scoping through remediation, and mentoring less experienced staff

Requirements

Background in coding, fluent in several modern programming languages; Excellent understanding of secure design and coding best practices; Experience using scanning tools for mobile, API and web application security testing; At least 2-4 years experience with a minimum of 3 of the following: Strong experience with AWS, Azure or GCP; Design of highly-available and highly-secure solutions in the financial sector; Design of container-based infrastructures in the cloud; Development of mobile applications, RESTful APIs, web applications; Secure code review of mobile applications, RESTful APIs, web applications; Penetration testing of mobile applications, RESTful APIs, web applications