Security Consultant

Wipro; Dubai; On-site; AED 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a cybersecurity expert to enhance security practices across their organization. In this pivotal role, you will collaborate with stakeholders to implement security-by-design principles and develop robust security testing strategies. You will leverage your knowledge of OWASP Top 10 and various security tools to educate developers and improve coding practices. This position offers the opportunity to lead cybersecurity initiatives and contribute to a culture of security awareness. Join a forward-thinking company that values innovation and security in its development processes.

Qualifications

• Thorough knowledge of OWASP Top 10 for Web & Mobile applications.
• Strong understanding of network and web protocols.

Responsibilities

• Collaborate with stakeholders to improve security-by-design principles.
• Develop security testing strategies and implement secure coding practices.

Skills

OWASP Top 10

Network and Web Protocols

Reverse Proxies

Web Application Firewalls

CI/CD

API Gateways

IT Risk Management

Security Tools

Threat Modeling

Vulnerability Management

Tools

Open Source Security Tools

Commercial Security Tools

Job description

Job Responsibilities

1. Collaborate with relevant stakeholders continuously to define, implement, and improve security-by-design principles.
2. Develop and implement security testing strategies by leveraging current security research, upskilling the team, and applying findings to the Customer application security assurance program.
3. Implement secure coding practices to counter traditional and modern attacks, educating developers through awareness workshops and promoting industry best practices.
4. Apply DevSecOps principles by automating security activities such as static and dynamic analysis, container security, and orchestration security.
5. Provide security advisory during product grooming sessions, collaborating with developers, Scrum Masters, and product owners to prioritize security backlogs and ensure privacy and security by design.
6. Design solutions to complex business problems, evaluating and applying appropriate technologies following security engineering best practices.
7. Collaborate with business stakeholders, leadership, and engineering teams to improve cybersecurity practices across Customer.
8. Lead cybersecurity expertise within the dnata international portfolio, supporting diverse security requirements while maintaining oversight of activities.

Knowledge and Skills

• Thorough knowledge of OWASP Top 10 for Web & Mobile applications.
• Strong understanding of network and web protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).
• Knowledge of technologies such as reverse proxies, Web Application Firewalls, CI/CD, API gateways, SaaS.
• Understanding of IT Risk Management processes.
• Proficiency in using open source and commercial security tools.
• Experience in threat modeling, vulnerability discovery, and vulnerability management processes.
• Experience with Bug Bounty programs or similar initiatives.
• Ability to translate business requirements into technical solutions.

Disclaimer: Naukrigulf.com is a platform connecting jobseekers and employers. Candidates should verify prospective employers independently. We do NOT endorse requests for money or sharing personal/bank details. For security tips, visit Security Advice. Contact [e-mail] for fraud reports.