app security expert

توضیحات آگهی

Responsibilities Review and approve Security Audit Governance Checklists assessment methodologies audit scopes and evaluation criteria Conduct and supervise security assessments and audits of applications and systems with a particular focus on mobile applications Android iOS Perform architectural analysis and security reviews to identify potential security weaknesses risks and compliance gaps Plan coordinate and oversee penetration testing activities to evaluate the security of systems and applications Review penetration testing and security assessment results and ensure that findings are properly documented risk rated and communicated to relevant stakeholders Prepare review and approve security audit and penetration testing reports ensuring that findings risks evidence and recommendations are clearly documented Work closely with development infrastructure security and other relevant teams to understand security requirements and ensure identified risks are properly addressed Provide guidance and recommendations to development teams regarding remediation of identified vulnerabilities and improvement of their security posture Track remediation activities and audit findings through to closure ensuring that corrective actions are assigned followed up and completed within agreed timelines Take ownership of audit findings and ensure that unresolved risks are appropriately escalated to the relevant stakeholders and management Monitor the status of security risks remediation plans and audit actions and provide regular progress reports to management Establish and maintain effective security audit governance processes including checklists review procedures approval workflows evidence requirements and reporting standards Ensure consistency and quality of audit activities and deliverables across the team Coordinate with relevant stakeholders to obtain required evidence clarify findings resolve disputes and ensure timely completion of audit activities Identify recurring security weaknesses and provide recommendations for improving security controls processes and development practices Support continuous improvement of the organization s security audit and assessment processes Technical Responsibilities Perform and or supervise Mobile Application Security Assessments and Penetration Testing for Android and iOS applications Conduct architectural and security analysis of mobile applications to identify security weaknesses and potential risks Evaluate applications against recognized security standards and frameworks including OWASP Mobile Application Security OWASP Top 10 and relevant web application security practices Review mobile application security controls authentication authorization data protection communication security secure storage and other relevant security mechanisms Use and evaluate security testing tools such as Burp Suite OWASP ZAP MobSF MitMProxy and similar security assessment tools Maintain sufficient technical understanding of mobile application technologies and development frameworks including Java Kotlin Swift Objective C React Native and Xamarin to effectively review security issues and communicate with development teams Requirements Proven experience in Security Auditing Security Assessment Vulnerability Management or Penetration Testing Experience leading or coordinating a security audit or security assessment team Strong understanding of Security Governance Risk Management Audit Processes and Security Controls Ability to develop review maintain and approve security audit governance checklists and assessment criteria Strong understanding of application and mobile security concepts and common attack techniques Familiarity with OWASP Top 10 Web Mobile and other relevant security standards and frameworks Practical knowledge of mobile security testing and penetration testing methodologies Familiarity with tools such as Burp Suite OWASP ZAP MobSF MitMProxy and similar tools Familiarity with mobile programming languages and frameworks such as Java Kotlin Swift Objective C React Native and Xamarin Strong analytical and problem solving skills with the ability to assess security risks and determine their potential business impact Strong reporting documentation and communication skills Ability to communicate effectively with development infrastructure security and management teams Strong sense of ownership responsibility and accountability for assigned audits findings and deliverables Strong follow up and task management skills with the ability to continuously track open findings and remediation activities until closure Ability to prioritize multiple audits assessments and remediation activities while maintaining quality and meeting deadlines Ability to challenge findings constructively resolve disagreements with stakeholders and ensure that security requirements are properly addressed Ability to work independently while effectively leading and coordinating team members and stakeholders تهران تهران سعادت آباد تمام وقت ویستا سامانه آسا کارشناس ارشد جنسیت تفاوتی ندارد فناوری اطلاعات نرم افزار و سخت افزار