استخدام app security expert

توضیحات آگهی

Review and approve Security Audit Governance Checklists assessment methodologies audit scopes and evaluation criteria
Conduct and supervise security assessments and audits of applications and systems with a particular focus on mobile applications Android iOS
Perform architectural analysis and security reviews to identify potential security weaknesses risks and compliance gaps
Plan coordinate and oversee penetration testing activities to evaluate the security of systems and applications
Review penetration testing and security assessment results and ensure that findings are properly documented risk rated and communicated to relevant stakeholders
Prepare review and approve security audit and penetration testing reports ensuring that findings risks evidence and recommendations are clearly documented
Work closely with development infrastructure security and other relevant teams to understand security requirements and ensure identified risks are properly addressed
Provide guidance and recommendations to development teams regarding remediation of identified vulnerabilities and improvement of their security posture
Track remediation activities and audit findings through to closure ensuring that corrective actions are assigned followed up and completed within agreed timelines
Take ownership of audit findings and ensure that unresolved risks are appropriately escalated to the relevant stakeholders and management
Monitor the status of security risks remediation plans and audit actions and provide regular progress reports to management
Establish and maintain effective security audit governance processes including checklists review procedures approval workflows evidence requirements and reporting standards
Ensure consistency and quality of audit activities and deliverables across the team
Coordinate with relevant stakeholders to obtain required evidence clarify findings resolve disputes and ensure timely completion of audit activities
Identify recurring security weaknesses and provide recommendations for improving security controls processes and development practices
Support continuous improvement of the organization s security audit and assessment processes
Technical Responsibilities
Architectural analysis and design of mobile applications in order to identify security weaknesses and possible risks
Do penetration tests pen test to evaluate the security of systems with a focus on mobile systems Android IOS
Record full reports of penetration test results to provide detailed information about identified vulnerabilities
Work closely with development teams and other stakeholders to understand security needs
Provide guidance and suggestions to the development teams about fixing the identified vulnerabilities and their improvement
Requirements
Proven experience in Security Auditing Security Assessment Vulnerability Management or Penetration Testing
Experience leading or coordinating a security audit or security assessment team
Strong understanding of Security Governance Risk Management Audit Processes and Security Controls
Ability to develop review maintain and approve security audit governance checklists and assessment criteria
Strong understanding of application and mobile security concepts and common attack techniques
Familiarity with OWASP Top 10 Web Mobile and other relevant security standards and frameworks
Practical knowledge of mobile security testing and penetration testing methodologies
Familiarity with tools such as Burp Suite OWASP ZAP MobSF MitMProxy and similar tools
Familiarity with mobile programming languages and frameworks such as Java Kotlin Swift Objective C React Native and Xamarin
Strong analytical and problem solving skills with the ability to assess security risks and determine their potential business impact
Strong reporting documentation and communication skills
Ability to communicate effectively with development infrastructure security and management teams
Strong sense of ownership responsibility and accountability for assigned audits findings and deliverables
Strong follow up and task management skills with the ability to continuously track open findings and remediation activities until closure
Ability to prioritize multiple audits assessments and remediation activities while maintaining quality and meeting deadlines
Ability to challenge findings constructively resolve disagreements with stakeholders and ensure that security requirements are properly addressed
Ability to work independently while effectively leading and coordinating team members and stakeholders
شرکت ویستا سامانه آسا ASA
دسته بندی IT DevOps Server
نحوه همکاری تمام وقت
نوع همکاری حضوری
مدرک تحصیلی مهم نیست
سابقه کار سه تا شش سال
حقوق توافقی
جنسیت مهم نیست
مهارت ها امنیت اطلاعات OWASP ارزیابی امنیتی
شهر تهران تهران