JOB PURPOSE
We are seeking a motivated and skilled cybersecurity professional to support and manage our vulnerability analysis and prioritization functions. The ideal candidate will have hands-on experience in identifying, analyzing, and tracking vulnerabilities across infrastructure and applications, while also supporting secure SDLC practices, application security assessments, and remediation efforts. This role will work closely with cross-functional teams to ensure the security of both systems and applications.
KEY RESULT AREAS
- Perform and manage vulnerability assessments across servers, networks, cloud environments, and applications.
- Analyze, validate, and prioritize vulnerabilities based on severity, exploitability, and business impact.
- Prioritize Vulnerability mitigation and support patching based on contextualized risk.
- Support Infrastructure & Business applications to improve security posture on a continuous basis
- Track remediation efforts and coordinate with infrastructure, network, and development teams for timely closure.
- Prepare detailed vulnerability reports and dashboards for management.
- Conduct application security reviews using SAST, DAST, and manual testing techniques, and support secure SDLC practices.
- Identify application-level risks, misconfigurations, and code vulnerabilities, and work with developers to validate remediation.
- Review APIs, microservices, and cloud-native applications for security gaps.
- Prepare and share vulnerability and AppSec reports with management and stakeholders.
KNOWLEDGE, SKILLS AND EXPERIENCE
- Bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related discipline.
- 4 to 7 years of experience in vulnerability management and application security.
- Knowledge of vulnerability tools (e.g., Tenable, Qualys, Rapid7, Nucleus).
- Relevant certifications (e.g., OSCP, eJPT, CEH) are highly desirable.
- Experience with AppSec tools (e.g., Burp Suite, OWASP ZAP).
- Good understanding of secure coding practices and OWASP Top 10.
- Familiarity with cloud platforms (AWS, Azure, or GCP) and DevSecOps practices.
