Roles &amp; Responsibilities

<ul>
<li>Conduct comprehensive vulnerability assessments on infrastructure, applications, and networks.</li>
</ul>

<ul>
<li>Prioritize vulnerabilities based on risk levels and provide actionable remediation plans.</li>
</ul>

<ul>
<li>Develop and maintain a robust vulnerability management lifecycle.</li>
</ul>

<ul>
<li>Perform manual and automated penetration tests on web applications, APIs, mobile apps, and networks.</li>
</ul>

<ul>
<li>Simulate real-world attacks to identify security weaknesses and validate controls.</li>
</ul>

<ul>
<li>Research and integrate emerging tools and techniques to enhance testing capabilities.</li>
</ul>

<ul>
<li>Integrate security controls into CI/CD pipelines to ensure secure software development practices.</li>
</ul>

<ul>
<li>Automate security testing processes, including static and dynamic code analysis.</li>
</ul>

<ul>
<li>Conduct in-depth security reviews of applications, including source code reviews and architecture analysis.</li>
</ul>

<ul>
<li>Advocate for security-by-design principles across all stages of the SDLC.</li>
</ul>

<ul>
<li>Develop and implement long-term strategies to improve overall security posture.</li>
</ul>

<ul>
<li>Engage in threat modeling and risk assessment for critical assets.</li>
</ul>

<ul>
<li>Conduct secure configuration reviews and ensure secure application architectures.</li>
</ul>

<ul>
<li>Support the development and implementation of secure coding practices and frameworks.</li>
</ul>

<ul>
<li>Review and implement controls such as SCA (Software Composition Analysis) and SBOM (Software Bill of Materials).</li>
</ul>

<ul>
<li>Document findings, write detailed reports, and present results to technical and non-technical stakeholders.</li>
</ul>

<ul>
<li>Ensure compliance with industry security standards (e.g., OWASP, NIST, ISO 27001).</li>
</ul>

<ul>
<li>Lead and mentor team members to achieve organizational objectives.</li>
</ul>

<ul>
<li>Provide guidance during incident response and post-breach analysis.</li>
</ul>

<ul>
<li>Collaborate with cross-functional teams, including IT, DevOps, and compliance.</li>
</ul>

Skills Required

<ul>
<li>Strong expertise in vulnerability assessment, penetration testing, and security tools.</li>
</ul>

<ul>
<li>Proficiency in frameworks like MITRE ATT&amp;CK, OWASP Top 10, and secure SDLC principles.</li>
</ul>

<ul>
<li>In-depth understanding of secure coding practices and secure application architecture.</li>
</ul>

<ul>
<li>Knowledge of automation tools for static and dynamic code analysis.</li>
</ul>

<ul>
<li>Excellent threat modeling and risk assessment capabilities.</li>
</ul>

<ul>
<li>Familiarity with SCA and SBOM controls.</li>
</ul>

<ul>
<li>Strong documentation and reporting skills for both technical and non-technical audiences.</li>
</ul>

<ul>
<li>Ability to mentor and lead teams effectively.</li>
</ul>

<ul>
<li>Up-to-date knowledge of emerging threats, vulnerabilities, and security technologies.</li>
</ul>

Experience &amp; Qualification

<ul>
<li>Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).</li>
</ul>

<ul>
<li>15+ years of experience in cybersecurity, vulnerability management, and penetration testing.</li>
</ul>

<ul>
<li>Hands-on experience with security standards such as OWASP, NIST, ISO 27001.</li>
</ul>

<ul>
<li>Certifications like CISSP, OSCP, CEH, or equivalent are highly desirable.</li>
</ul>

<ul>
<li>Proven track record of implementing security controls in CI/CD pipelines.</li>
</ul>

<ul>
<li>Experience in incident response and post-breach analysis is a plus.</li>
</ul>

Cybersecurity

Job Details & Overview

Skills Required for Cybersecurity

Job Description for Cybersecurity