Security Assurance

SUMMARY:
Our client in the Telco sector is seeking a Security Assurance on a contract duration of 12 months 

Role Purpose

Seeking experienced Security Assurance Assessment Consultants to assess and strengthen the security posture of its technology environment. The consultants will be responsible for conducting technical security assessments, penetration testing, cloud security posture assessments, API security assessments, DevSecOps implementation, threat modelling and security gap analyses. The role will focus on identifying vulnerabilities and security gaps across cloud infrastructure, applications, APIs, mobile applications, web applications, DevOps pipelines and internal/external networks, while working closely with development, DevOps and security teams to drive remediation and validate the closure of identified vulnerabilities.

POSITION INFO:
Minimum Experience & Qualifications The ideal candidate should have: 8+ years' experience in Cybersecurity, Information Security, Security Assurance or Penetration Testing. Proven experience conducting security assessments across enterprise technology environments . Strong experience in cloud security assessment and remediation . Strong experience in application security and penetration testing . Proven API security testing experience. Hands-on DevSecOps and CI\/CD security experience. Experience performing SAST, DAST and SCA assessments. Strong understanding of vulnerability management and remediation. Experience with threat modelling and security risk assessments. Experience working with development, DevOps, cloud and security teams. Experience producing technical security assessment and executive-level reports. Preferred Certifications Relevant certifications would be advantageous, including: OSCP OSWE CREST CISSP CISM CCSP CEH GIAC certifications AWS\/Azure Security certifications ISO 27001 Lead Implementer \/ Lead Auditor Other recognised cloud, application security or penetration testing certifications The resource need to have: DevSecOps \/ CI\/CD Security Implementing DevSecOps practices Securing CI\/CD pipelines SAST, DAST and SCA Tools such as SonarQube and Fortify Cloud Security Security assessments of cloud environments Strong Azure experience Cloud Security Posture Management Microsoft Defender for Cloud\/CSPM Identifying and remediating cloud misconfigurations Penetration Testing & API Security Web application penetration testing Mobile application testing API security testing Internal\/external network testing OWASP API Security Top 10 Tools such as Burp Suite Pro, OWASP ZAP and Postman Cybersecurity Governance \/ Compliance Security posture assessments Gap analysis ISO 27001 NIST Cybersecurity Framework CIS Benchmarks PCI DSS Risk assessments and threat modelling