Senior Specialist – Cyber Security Assurance

Responsible for:

• Manage the Security and Privacy by Design Assurance (SPDA) processes
• Ensure that all projects follow the security-by-design principles, and that privacy and security risks are mitigated from the design phase to implementation.
• Conduct internal and external penetration tests on the company’s infrastructure, web applications, APIs, and network systems to identify vulnerabilities.
• Assess the security of new and existing systems, products, and services to ensure compliance with company security policies, industry standards, and best practices.
• Safely exploit vulnerabilities to determine the risks of unauthorized access or data compromise.
• Conduct both automated and manual tests to evaluate the resilience of systems against various attack vectors.
• Architect and design cybersecurity systems in line with industry best practices to ensure security, performance, and scalability.
• Collaborate with IT teams to ensure secure integration of new systems and services and that they comply with cybersecurity requirements.
• Implement threat modeling and risk assessments in the design phase of security systems and software.
• Review and provide security assessments of company technology projects to close any MPA risks (Material, Procedural, and Administrative), ensuring that risks are mitigated early.
• Ensure that all projects are designed, executed, and delivered with the required security baselines in mind.
• Stay up-to‑date with the latest security trends, attack techniques, and mitigation strategies to ensure the organization remains ahead of emerging threats.
• Research and implement innovative cybersecurity technologies and methodologies to improve overall defense posture.
• Participate in knowledge sharing, training, and mentoring activities within the cybersecurity team to foster a culture of continuous learning and improvement.

• Experience: Minimum of 5 years in penetration testing or ethical hacking.
• Certifications: Strongly preferred certifications like OSCP (Offensive Security Certified Professional),
  CEH (Certified Ethical Hacker),
  CISSP (Certified Information Systems Security Professional),
  CISA (Certified Information Systems Auditor).
• Technical
  
  Skills:
  
  
  • Proficiency in penetration testing tools such as Kali Linux
    , Burp Suite
    , Metasploit
    , Nessus
    , etc.
  • Strong knowledge of network security
    , web application security
    , cloud security
    , and mobile application security
    .
  • Soft Skills:
    • Familiarity with programming/scripting languages like Python
      , Bash
      , Ruby
      , Power Shell
      , or Java Script .