Application Security

Organisation Unit Purpose (why does the unit exist? What are the results the unit is expected to deliver?)

• The unit's primary purpose is to Design, Engineer & eventually Embed practical & balanced cyber / information security principles / patterns / controls into all products and platforms. Conduct security assessments, gap analysis, provide remediation to the relevant squads / stakeholders.

Job Purpose (Why does the job exist? What is the unique contribution made by the job holder?)

Primary / General Job Purpose :

Key Skills – Web Application Security, Security Code review, API security, Underlying infrastructure security, Integration Security, Database Security, Secure Configuration Review.

Experience with following Components :

Technical Requirements

Application Security - Assessment Skillset

1. Web Application Security – Owasp top 10 , CVSS etc

2. Security Code Review – manual code review in Git etc

3. API Security Review – Open shift, container review etc.

4. Database Security – Requirements to enhance security on Database

5. Web Server Security – Requirements to enhance security on the web server

6. Configuration Review – has performed different configuration reviews and should have found good misconfigurations in the system.

7. Integration review – How the application connects with different systems, performed security review on those integrations.

8. Transport Layer Security – How communication channels are secured and understanding of the Transport layer security mechanisms and controls.

Soft Skills :

Education

Bachelor's degree in a computer-related field such as computer science, cyber / information security discipline, physics, mathematics or similar (Essential)

Experience (Essential)

Knowledge & Skills - Technical, Functional & Managerial

Behavioral Competencies - Thinking Related, People Related & Self Related (All Essential)

Other Information