Urgent opening for Security Consultant

Wipro Limited; Dubai; On-site; AED 60,000 - 110,000; Full time

Job summary

An established industry player seeks a cybersecurity expert to enhance security practices. This role involves implementing security testing strategies, developing secure coding practices, and applying DevSecOps principles. You will collaborate with stakeholders to prioritize security needs and design solutions to complex business challenges. If you are passionate about cybersecurity and eager to lead in a dynamic environment, this opportunity is perfect for you!

Qualifications

• Thorough knowledge of OWASP Top 10 (Web & Mobile).
• Experience in threat modeling, vulnerability discovery, and management.

Responsibilities

• Collaborate with stakeholders to define and improve security principles.
• Develop effective security testing strategies and implement secure coding practices.

Skills

OWASP Top 10

Network and web protocols

Threat modeling

Vulnerability management

Security tools

DevSecOps principles

Tools

Web Application Firewalls

CI/CD

API gateways

Job description

Job Responsibilities

1. Collaborate with relevant stakeholders on a continuous basis to define, implement, and improve security-by-design principles.
2. Develop and implement effective security testing strategies by leveraging cutting-edge security research, upskilling the team, and staying updated on security trends to enhance the Customer application security assurance program.
3. Implement and develop secure coding practices to counter traditional and modern attacks affecting Customer digital assets, including conducting awareness workshops and promoting industry best practices.
4. Apply DevSecOps principles by automating security activities such as static and dynamic analysis, container security, and orchestration security.
5. Provide security advisory during product grooming sessions with developers, scrum masters, and product owners to prioritize security backlogs, offer technical expertise, and ensure privacy and security by design.
6. Design solutions to complex business problems, evaluate technologies, and follow security engineering best practices.
7. Collaborate with business stakeholders, leadership, and engineering teams to enhance cybersecurity practices affecting Customer.
8. Lead cybersecurity expertise within the dnata international portfolio, supporting diverse security requirements.

Minimum Requirements

• Thorough knowledge of OWASP Top 10 (Web & Mobile).
• Understanding of network and web protocols (TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).
• Knowledge of technologies like reverse proxies, Web Application Firewalls, CI/CD, API gateways, SaaS.
• Understanding of IT Risk Management processes.
• Proficiency in using open source and commercial security tools.
• Experience in threat modeling, vulnerability discovery, and vulnerability management.
• Experience with Bug Bounty processes or similar.
• Ability to translate business requirements into technical security requirements.