Enterprise Security Expert – Web Application Security Analyst

Job Description :

The position of the Enterprise Security Expert / Web Application Security Analyst is organizationally placed in the Information Security Unit. In this capacity, the Analyst will be primarily responsible for performing information security assessments of web-based applications, code reviews and web application security consulting.

Specific responsibilities :

• Perform web application threat modeling, vulnerability assessments, code reviews, and develop mitigation strategies.
• Formulate assessment reports outlining findings and specific actionable recommendations.
• Formulate assessment reports outlining identified information security vulnerabilities, potential impact; provide and prioritize actionable recommendations, and estimate remediation effort levels.
• Develop testing procedures and scripts.
• Contribute to the ongoing enhancement of the Organization’s web application vulnerability assessment capabilities through the development and implementation of improved methodology, processes, and tools.
• Liaise with internal ICT groups and other constituencies including counterparts in partner organizations and third party security service providers on the issues relating to the web application security.
• Mentor team members on web application assessment methodologies and techniques.

Qualifications :