Tech Stack
AzureCyber SecurityDNSJavaScriptLinuxPythonTCP/IP
About the role
- Perform security requirements analysis and threat modelling
- Conduct risk analysis and define test strategies aligned with security objectives
- Plan, implement, and report on security testing activities including tool and technique selection, security requirements testing, threat mitigation testing, vulnerability testing, abuse case testing, attack surface analysis, regression testing and test automation
- Analyse, report, and supervise security defects
- Ensure compliance with internal processes and applicable standards (e.g., IEC 62443, ISO 27001)
- Support internal and external audits as required
- Drive continuous improvement by staying updated on emerging threats, tools, and standard methodologies
- Occasional travel may be required, such as training or customer support
Requirements
- Proven ability with a minimum 5 years of experience in software and/or firmware testing
- Engineering degree or equivalent experience in Software, Computer Science, Cybersecurity, or equivalent proven knowledge
- Proficiency with tools such as Burp Suite, OWASP ZAP, Nessus, Metasploit, Wireshark, Nmap, Fortify, Checkmarx
- Knowledge of scripting languages such as Python, JavaScript, Bash, or PowerShell
- Understanding of encryption algorithms, key management, and secure protocols (TLS, SSH, etc.)
- Detailed understanding of common vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25)
- Familiarity with Linux, Windows, and network protocols (TCP/IP, DNS, HTTP/S)
- Understanding of industrial protocols (e.g., Serial, Modbus, HART)
- Proficiency in industry regulations including IEC 62443, ISO 27001, NIST, OWASP
- Proficiency in incorporating DevSecOps strategies; experience with Azure DevOps is a plus
- Self-directed and motivated in a team orientated environment