Information Security Specialist - Penetration Testing & Application Security

Role Overview

This position demands expertise in Information Security focusing on penetration testing and application security validation. The role centers on safeguarding web, mobile, and internal applications particularly in the financial sector by detecting and mitigating security vulnerabilities.

Essential Qualifications and Experience

• Holds a bachelor's degree with 3 to 5 years of experience in penetration testing and application security.
• Possesses recognized security certifications such as CEH, OSCP, OCSE, OSWA, CISSP, or GPEN.
• Experienced in security testing of banking and other internal applications.
• Capabilities in hacking and penetration strategies for web and mobile applications.
• Competence in vulnerability assessments and diverse security testing including wireless networks, VOIP, ATM, and WebAPI security.
• Hands-on use of security testing tools like Nessus, Qualys, BurpSuite, Netsparker, Metasploit, Kali Linux, WebInspect, Acunetix, and Metasploit.
• Strong practical knowledge of security standards and practices such as OWASP and SANS.
• Experience auditing operating systems, databases, network infrastructure, and security technologies.

Key Responsibilities

• Lead the effort on conducting application security testing, penetration testing, vulnerability assessments, and configuration reviews across various platforms including network, web, mobile, payment gateways, APIs, and thick-client applications.
• Execute both manual and automated security testing on multiple platforms covering web, mobile, infrastructure, network, Wi-Fi, ATM systems, payment gateways, and APIs.
• Support the development and integration of security measures during new or upgraded business and infrastructure projects throughout their lifecycle.
• Ensure that deployed applications incorporate necessary security protocols aligned with relevant technologies, architectural standards, organizational policies, and compliance demands.
• Organize and perform scheduled testing, meticulously document vulnerabilities and remediation efforts, and collaborate with internal teams to resolve security findings.
• Keep up-to-date with latest security trends, vulnerabilities, tools, and mitigation techniques to address emerging threats effectively.
• Coordinate with external security vendors and auditors during security assessments and audits.