דרושים בתחום מנהל פרוייקטים באבטחת מידע

A Cloud company and a market leader in the field of service engagement is looking for a Cloud Security Engineer.
Deliver solutions, architectures, and automation to secure  application’s infrastructure in Amazon Web Services (AWS).
Ability to build secure DevOps architecture patterns and provide prescriptive guidance on how to secure network, storage, operating systems, Kubernetes, RDBMS & NoSQL databases, containers etc. in AWS cloud.
Conduct POCs and POVs (proof-of-value) to demonstrate efficacy of application development, cloud and CI/CD security solutions.
Engage with IT, cloud platform and business development teams to ensure requirements, policies and adoption is executed with excellence.
Proven experience in DevSecOps concepts and automation. 

A Cloud company and a market leader in the field of service engagement is looking for an experienced, highly-skilled Application Security Manager to lead the company AppSec team, while enhancing and managing the products security program (SaaS, OnPrem and mobile). You will work closely with the Security and R&D teams to determine security gaps, prioritize vulnerabilities and manage the implementation of mitigation plans and provide expert technical guidance, hands on validation of secure solutions during the design, development, and testing of systems in a SaaS and corporate network.

Your key responsibilities
• Capable of conducting application vulnerability assessments.
• Preparing detailed review reports and leading strategic initiatives
• Researching new security areas and domains.
• Mentoring new team members
• Support the team in updating their skill and knowledge

Skills and attributes for success
• Hands on experience of Web, thick client, Mobile, VOIP, Wireless Application security reviews.
• Usage of various security tools. Should be familiar with various application testing methodology and tools such as Burp Professional, Nmap, Wireshark, Nessus, echomirage.
• Exposure and good understanding of the various manual testing methodologies.
• Should be familiar with automated scan tool Webinspect.
• Basic Knowledge of programming language like C/C++, C#, JAVA, ASP.NET and familiar with PERL/Python Scripting.
• Familiar with OWASP and Secure SDLC standards
• Knowledge of common security requirements within ASP.NET & Java application
• Good Knowledge of TCP/IP, Network Security.
• Knowledge / experience on code review
• Good Technical aptitude, problem solving and ability to quickly learn and master new topics and domains.
• Excellent communication skills; written and verbal.

Education:
• Bachelor's degree in a technical discipline such as Engineering or Computer Science or equivalent work experience in IT and Information Security
• 4 - 5 yrs experience in application security assessment
• Hands on experience of Web, thick client, Mobile Application security reviews.
• Exposure and good understanding of the various manual testing methodologies.


Ideally, you’ll also have
Desirable: IT security Certifications (CEH. ECSA, OSCP)