Penetration Testers

Description:

Upstream Recruitment are looking for Penetration Testers (Security Assessors) with experience in Web, Mobile, API & Source Code Vulnerability assessments. The unit’s primary purpose is to Design, Engineer & eventually Embed practical & balanced cyber / information security principles/patterns/controls into all products and platforms. Conduct security assessments, gap analysis, provide remediation to the relevant squads / stakeholders.

Primary/General Job Purpose:

•Encourage ‘Shift Left’ Mindset - Proactively embed security requirements, by influencing implementation ofsecurity & privacy patterns from the start of the development cycle

•Implement via Influence - Influence stakeholders such as Product Owners, Solution Architects, Developers,Testers, Engineers & others to include security patterns into features, epics and stories in order to build secure,innovative & superior digital products for customers and employees

•Assessments – Perform security assessment and perform gap analysis to provide appropriate remediations tothe teams for implementing the fixes.

Key Skills – Web and Mobile Application Security, Security Code review, API security, Platform security,IAST, SAST, DAST,

•Tools and Technologies – Expertise Burp Suite, MobSF, Frida, Kali Linux, Nessus, Checkmarx SAST,Kubernetes, Docker, Jenkins, GitHub, OpenShift and good knowledge about microservice architectureand pipeline driven security.

Qualifications / Experience:

· Bachelors Degree in Computer Engineering or related discipline.

· Minimum 4 years experience as Security Engineer in cloud environment.

. Strong experience in Mobile security application testing is essential.

· General Cloud Security: CCSK /CCSP or similar

· Specific Cloud Security: AWS/Azure/GCP/Oracle Solution/Security or similar

· Network Security: CCNA, CCNP, CCIE, Certified Kubernetes Security Specialist