The Role
Lead offensive security activities including vulnerability identification, penetration testing, exploitation operations, threat hunting, risk assessments, and security control evaluations. Develop exploitation strategies, cybersecurity tools, countermeasures, alerting improvements, tabletop exercises, and technical reports. Analyze malicious activity and indicators of compromise while partnering with security teams to improve enterprise, network, application, and wireless security.
Summary Generated by Built In
- Identify vulnerabilities and exposure within
enterprise networks, systems, and applications.
- Lead or enable exploitation operations in
support of organization objectives and target requirements.
- Perform technical (evaluation of technology) and
nontechnical (evaluation of people and operations) risk and vulnerability
assessments of relevant technology focus areas (e.g., local computing
environment, network and infrastructure, enclave boundary, supporting
infrastructure, and applications).
- Provide recommendations regarding the selection
of cost-effective security controls to mitigate risk (e.g., protection of
information, systems, and processes).
- Provide technical documents, incident reports,
video recorded descriptions, findings from computer examinations, summaries,
and other situational awareness information to relevant stakeholders.
- Conduct and/or support authorized penetration
testing on enterprise network assets and perform penetration testing as required for new
or updated applications.
- Review the security status of a system
(including the effectiveness of security controls) on an ongoing basis to
determine whether the risk remains acceptable.
- Provide recommendations for how to improve the
controls based on test scenario findings and create and conduct custom tabletop exercises.
- Partner with other teams on alert development to
create new alerts and identify gaps in alerting.
- Develop your own test scenarios by performing
threat hunts and ethical hack tests and analyze Threat Trends to identify indicators of
compromise (IOCs).
- Design and develop new tools/technologies
related to cybersecurity and identify control gaps that allow threats to
enter our network.
- Develop specific cybersecurity countermeasures
and risk mitigation strategies for systems and/or applications.
- Exploit network devices, security devices,
and/or terminals or environments using various methods or tools.
- Create comprehensive exploitation strategies
that identify exploitable technical or operational vulnerabilities, and test and evaluate locally developed tools for
operational use.
- Identify functional- and security-related
features to find opportunities for new capability development to exploit or
mitigate vulnerabilities.
- Perform analysis for target infrastructure
exploitation activities and conduct exploitation of wireless computers and
digital networks.
- Analyze identified malicious activity to
determine weaknesses exploited, exploitation methods, effects on system and information.
Requirements
- Bachelor's Degree in Computer Science, Information Technology, Electrical & Electronic Engineering, or a related discipline from a reputable higher institution.
- 3+ years experience in a similar role, preferably in a Fin-tech or financial services industry.
- Experience leading projects and mentoring junior team members will be a plus.
- Strong analytical, planning, organization, and problem-solving skills.
- Excellent communication and interpersonal skills, and ability to work independently and as part of a team.
- Experience with web security, application security, and strong red team security experience is essential.
Benefits
Qore provides the rare
opportunity to make history in the financial space for Africa by Africans,
while working with the smartest, brightest & coolest minds in Africa. Our
people & culture team continuously thinks of innovative ways to improve employee
experience and some of the other benefits of working with Qore includes:
- Very Competitive & Rewarding Pay
- Flexible work option (i.e., Remote)
- Paid Lunch for onsite work
- Lifelong Learnings
Skills Required
- Bachelor’s degree in Computer Science, Information Technology, Electrical and Electronic Engineering, or a related discipline
- At least 3 years of experience in a similar cybersecurity role
- Experience with web security and application security
- Strong red team security experience
- Experience in fintech or financial services
- Experience leading projects and mentoring junior team members
- Strong analytical, planning, organization, and problem-solving skills
- Excellent communication and interpersonal skills
- Ability to work independently and as part of a team
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Appzone Group has evolved into Zone, a payment infrastructure company and Africa's leading FinTech disruptor. It provides home-grown software solutions for the financial services industry, focusing on blockchain-enabled payments and digital currencies.
