Cyber Security- Analyst

Responsibilities:

• Perform application security testing and penetration testing of web application, APIs and mobile (ios/android) applications to identify potential vulnerabilities and risks.
• Conduct threat modelling, secure architecture review and application security assessments.
• Run DAST and SAST tools against the application and code and engage with the development team to prioritize and remediate findings in a timely manner.
• Drive the adoption of static and dynamic code analysis capabilities to catch flaws as part of the design and continuous integration.
• Provide guidance and direction for the evolution of security capability within our development processes and platform environment.
• Conducting security training and awareness sessions for developers and other stakeholders.
• Contribute to the adoption of bug bounty program in the organization.

Desired Skills:

• Extensive hands on experience with security assessment of web/mobile applications and APIs.
• Hands on experience in network and server vulnerability assessment.
• Familiarity with security testing tools such as Burp Suite, Snyk, OWASP ZAP, or Nessus.
• Ability to analyze and interpret code to identify security risks.
• Understanding of common web application vulnerabilities including OWASP Top 10 and SANS Top 25 risks.
• Understanding of bug bounty platforms such as HackerOne.
• Familiarity of testing applications hosted within AWS environments, virtualisation/containerisation technologies (Docker, Kubernetes), and cloud-native security solutions.
• Excellent communication skills, particularly written communication, and collaboration skills, as well as the ability to work independently.
• Familiarity with risk profiles specific to banking and fintech organizations, including emerging threats, classes of attack, and ongoing campaigns.