Title: Lead Administrator
Job Description
Role Purpose
• We are looking for Application Security Lead Analyst / Engineer with expertise in SAST, DAST, Penetration Testing, Secure Code Review, Secure Design Review. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of service offering
͏
Duties and Responsibilities
• A strong and thorough understanding of Application Security with a passion to innovate
• Strong knowledge experience with Vulnerability Assessment and Penetration Testing
• Strong knowledge to automate DAST/SAST solutions scanning and reporting
• Performing Manual Secure Code Review and Secure Design Review
• Strong knowledge of OWASP Top 10 web and the ability to effectively communicate methodologies and techniques with development teams
• Good understanding of Java, Python, etc.
• Hands-on experience of Web Application Scanning Tools (both Open Source and Commercial) •
Knowledge of performing Threat Modeling and Application Design Reviews
• Good understanding of SSDLC and Secure Software Delivery Frameworks
• Provide guidance to development teams for remediating application security vulnerabilities
• Should have at least one professional certification but not limited to CEH/Security+/eJPT or equivalent
• Good to have certifications like OSCP/eWAPTX/OSCE/CRTE/eCPTX or equivalent Leading the functions as an individual, performing below assignments
: • Responsible for performing and overseeing Penetration testing, SAST, DAST, Manual Secure Code Review and Secure Design Review
• Make suggestions for security improvements.
• Enhance existing methodology material
• Mentoring Junior Resources Good to have working experience on:
• Good understanding of Cloud Security Concepts AWS/Azure
• Should have Project Management Skills (using Jira / Confluence / SNOW
͏
͏
͏