Application Security Expert
Job Description & How to Apply Below
We are seeking an experienced Application Security Expert to assess and strengthen the security of Telco products, applications and platforms. The role will focus on threat modelling, penetration testing, DAST/SAST, secure code review, vulnerability assessment and Dev Sec Ops across enterprise, telecom and customer-facing applications.
Key Responsibilities- Conduct web, mobile and API penetration testing
, vulnerability assessments and security validation using both automated and manual techniques. - Perform SAST, DAST, SCA and secure code reviews
, including false-positive/false-negative analysis and remediation validation. - Conduct threat modelling and application security risk assessments using methodologies such as STRIDE and DREAD.
- Secure telecom applications including BSS/OSS, CRM, Billing, Charging, Provisioning, Order Management, Subscriber Management, Self-Care, Mobile Applications and APIs
. - Assess security across 4G/5G, EPC/5GC, IMS, API Gateways, microservices and network-facing applications
. - Integrate application security controls and security gates into CI/CD pipelines using Git Lab and Jenkins
. - Secure modern architectures involving cloud, containers, Kubernetes and Infrastructure-as-Code
. - Support investigation of application security incidents, identify root causes and recommend remediation.
- Assess security risks associated with AI/ML-enabled applications, APIs and data flows
. - Work closely with developers, architects, Dev Ops, cloud and cybersecurity teams to embed security throughout the SDLC.
- 10+ years of Application Security / Cybersecurity experience
, with strong hands-on App Sec expertise. - Proven experience in DAST, SAST, penetration testing and secure code review
. - Strong telecom/Telco application security experience.
- Strong knowledge of OWASP Top 10, API Security, NIST, PCI DSS and NIA
. - Hands-on experience with Burp Suite, Metasploit, Kali Linux, Sonar Qube, Checkmarx or Fortify
. - Experience with Tenable, Qualys or Rapid7
. - Strong Dev Sec Ops experience with Git Lab, Jenkins, Docker, Kubernetes and Terraform
. - Experience securing AWS, Azure or GCP environments.
- Strong knowledge of SCA, CVE management and third-party/open-source dependency security
.
CISSP | OSCP | CEH | CCSP or equivalent security certifications.
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×