About the Security Engineer role:
Responsibilities
Involved in Red Team activities:
- Perform penetration testing of Web and Mobile (iOS, Android, Windows, and Mac) applications
- Own the vulnerability management lifecycle from identification, remediation to reporting
- Active monitoring and detection of operational security risks in the organization
- Conduct technical investigations on security incidents and tools
- Liaise directly with users on security enquiries and concerns during Pre-sales and Support
Conduct engagement with the Blue Team for the following:
- Work with engineering and DevOps teams to implement security best practices
- Implement and improve workflows to automate vulnerability detection as part of the software development lifecycle
- Review risks and patches of software components used in the applications
- Facilitate threat modelling as part of the software development lifecycle
- Help in security awareness training
- Help in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2
Requirements
Qualifications
- At least 5 years of experience in application security testing and assessments
- Solid understanding of cybersecurity principles, standards, and protocols such as OWASP Top 10 and SANS Critical Security Controls
- Experience with application security tools such as Burpsuite, OWASP ZAP, Metasploit, SonarQube (experience with Ghidra or IDA is a plus)
- Experience with programming languages such as Java, JavaScript, C/C++
- Experience with scripting languages such as Bash or PowerShell
- Experience and knowledge of cloud solutions and architectures such as AWS
- Experience and knowledge of Security Information and Event Management (SIEM) technologies
- Good analytical skills
- Strong sense of ownership
- Technical and industry certifications such as CISA, CISM, CISSP are a plus
Others:
- Successful completion of background check and NBI clearance will be required.
Skills Required
- At least 5 years of experience in application security testing and assessments
- Understanding of cybersecurity principles, standards, protocols, OWASP Top 10, and SANS Critical Security Controls
- Experience with Burp Suite, OWASP ZAP, Metasploit, and SonarQube
- Programming experience with Java, JavaScript, and C/C++
- Scripting experience with Bash or PowerShell
- Experience with cloud solutions and architectures such as AWS
- Experience and knowledge of SIEM technologies
- Good analytical skills
- Strong sense of ownership
- Experience with Ghidra or IDA
- CISA, CISM, or CISSP certification
- Successful completion of a background check and NBI clearance
What We Do
Convene is a multi-awarded and leading board portal solution from Azeus that is used by boards of directors of FTSE 100, Fortune 500, financial institutions, governments, and non-profit organizations in more than 100 countries. Designed specifically for senior level executives and company secretaries, our innovative board meeting software gives you complete control over the entire meeting process - from pre-meeting preparation to post-meeting document distribution - and ensures good governance driven by security and accountability. Convene is developed with an emphasis on responding to the challenges of enterprise and public services that require data protection, control, availability, and application security. Built with strong security mechanisms throughout the system and backed by a CMMI level 5 company with over 30 years of experience in the IT industry, Convene is guaranteed to protect confidential information and provide a great user experience for your entire board. Our global team of professionals is available 24/7/365 to answer queries at any time of the day. As a top-tier board management software, we have dedicated experts to conduct face-to-face and online training sessions for your organization. With better designed features, Convene provides a seamless paperless board meeting experience across all devices. Book your demo now at www.azeusconvene.com/sales.
