Work closely with the engineering team on all security initiatives, ensuring that products are built securely by default and that audits and remediation efforts are managed to ensure smooth and timely resolution
Be flexible, resourceful in problem-solving, and willing to take on new challenges as the business evolves
Conduct comprehensive risk assessments and vulnerability analyses to identify potential threats and security gaps in existing and new systems/architectures
Implement and manage static and dynamic code analysis tools in the CI/CD pipelines
Perform security reviews of the source code and advise developers on the remediation
Conduct system vulnerability scanning to identify infrastructure vulnerabilities in networks, systems, middleware and databases
Conduct vulnerability risk assessments to evaluate the likelihood and potential impacts of each identified vulnerability.
Manage the remediation lifecycle with a risk-based approach to ensure that all vulnerabilities are remediated in accordance with accepted industry standards.
Manage the end-to-end process of handling externally reported vulnerabilities or bug bounty reports
Requirements
Total experience of 5-7 years in the area of cybersecurity
At least 3 years of experience in the area of vulnerability management
At least 3 years of experience in the area of software development and scripting (Java, Node.js, Python)
Solid foundations in networking, operating systems, and applications
Serve as a self-starter, diligently tracking progress and communicating status updates without prompting
Ability to ask the right questions to understand the parameters of any project they're working on or want to undertake
Ability to communicate effectively with both technical and non-technical stakeholders
Ability to work independently, take ownership of tasks, and drive them to completion
Ability to acquire new skills and knowledge independently
Benefits
Wellness Boost: Stay healthy with resources for physical and mental well-being with our flexible benefits and Employee Well-being Program - because you matter!
Customized Benefits: Tailor your benefits with our flexible plan.
Growth Opportunities: Unlock your potential through clear progression paths.
Skill Development: Access training resources to fuel your personal and professional growth.
Volunteer Time Off: Enjoy paid time off to make a difference in the world through volunteering.
Family Support: Take advantage of paid Family Care Leave to bond with your family, while our selected Flexible Benefits also cater to your family's needs.
Senior Infrastructure Security Engineer handling cloud security and infrastructure lifecycle for Zocks, a fintech startup. Responsible for security initiatives and compliance readiness in a rapidly growing team.
Data Center Security Officer ensuring safety and security for data center clients through patrols and monitoring. Conducting reports and maintaining client security requirements.
Cybersecurity Specialist overseeing the protection of clients' technology systems and networks. Implementing cybersecurity policies and conducting evaluations against cyber threats in a supportive working environment.
Providing security incident management for industrial environments at Telefónica Tech. Utilizing various monitoring platforms to enhance security posture.
Senior Cybersecurity Incident Responder at ZEISS handling technical incident response activities. Collaborating with cyber defense teams to ensure effective incident management and resolution.
Information Security Manager responsible for steering InfoSec programs globally at ZEISS. Leading cross - functional initiatives and risk management strategies in a high - tech environment.
Endpoint Security Engineer at Booz Allen designing and operationalizing data protection controls. Safeguarding sensitive data across enterprise systems and leading technical operations.
Senior Security Adviser handling governance and US integration tasks at Boeing. Liaising with US - based partners and coordinating crisis management for international security operations.
Lead Industrial Security Specialist at Boeing assessing compliance with security programs and implementing corrective actions. Involves extensive travel and oversight of security protocols across multiple locations.