Cyber Security

Responsibilities:

• Conduct comprehensive application security testing and penetration testing for web applications, APIs, and mobile (iOS/Android) applications to identify vulnerabilities and risks.
• Perform threat modeling, secure architecture reviews, and application security assessments.
• Utilize DAST and SAST tools against applications and code, collaborating with development teams to prioritize and remediate identified findings promptly.
• Champion the adoption of static and dynamic code analysis within design and continuous integration processes.
• Provide expert guidance and direction for the advancement of security capabilities within our development processes and platform environment.
• Deliver security training and awareness sessions for developers and other relevant stakeholders.
• Contribute to the establishment and adoption of a bug bounty program within the organization.

Desired Skills:

• Demonstrated hands-on experience in security assessment of web, mobile applications, and APIs.
• Proficiency in network and server vulnerability assessment.
• Familiarity with security testing tools such as Burp Suite, Snyk, OWASP ZAP, or Nessus.
• Strong ability to analyze and interpret code to identify security risks.
• Solid understanding of common web application vulnerabilities, including OWASP Top 10 and SANS Top 25 risks.
• Knowledge of bug bounty platforms like HackerOne.
• Experience testing applications hosted on AWS, virtualization/containerization technologies (Docker, Kubernetes), and cloud-native security solutions.
• Excellent communication, collaboration, and independent work skills.
• Familiarity with risk profiles pertinent to banking and fintech organizations, including emerging threats, attack classes, and ongoing campaigns.