Compet. Center Vulnerability Management

PrimeIT; Lisboa; Presencial; EUR 1000 - 2000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Training plan

Growth opportunities

International projects

Resumo da oferta

PrimeIT is seeking a Risk Analyst & Permanent Controller in Porto to support code analysis deployments and SDLC process improvements. The role involves implementing security scans, assessing vulnerabilities, and collaborating with development teams to mitigate security risks.

A strong IT risk and cyber security background is required, with relevant certifications helpful. Join a dynamic environment offering health insurance, training plans, and opportunities for growth within international

Qualificações

• 2+ years of experience in IT Risk and Cyber Security.
• Understanding security principles and best practices for code security.
• Familiarity with security tools and development technologies.
• Knowledge of OWASP Top 10 (application security risks).

Responsabilidades

• Support deployment of the code analysis and dependency solution.
• Participate in SDLC process implementation.
• Implement and perform security scans (SAST/SCA/DAST) and assess vulnerabilities.
• Collaborate with development teams to identify and mitigate security risks.
• Collaborate to implement security measures for application security.
• Participate in security controls implementation and reporting.

Conhecimentos

Security tools

Vulnerability management

Python scripting

OWASP Top 10

Java & REST APIs

InfoSec experience

French basics

Ferramentas

Qualys Fortify

Nexus IQ

Kubernetes

Descrição da oferta de emprego

Did you know that the average reading time for a job advertisement is only 30 seconds? Let's use them well: 18 years of experience. 2,360 employees. 20 offices and 2 Talent Hubs. 10 internal programmes designed with you in mind.

We are looking for a Risk Analyst & Permanent Controller!

Location: Porto

Level of Experience: Mid

Salary Package & Benefits: €1,200 to €2,000 (salary base) + Food Allowance + Flex Benefits

Main Tasks and Responsibilities:

• Support for the deployment of the code analysis and dependency solution
• Participation in the implementation of SDLC processes
• Implement & perform security scans (SAST/SCA/DAST (WAS)) and assess/qualify vulnerabilities identified by different sources
• Collaborate with development teams to identify and mitigate security risks
• Collaborate with development teams to implement security measures to ensure application/code security
• You will participate in the implementation of security controls, the measurement of security process performance, and the associated reporting.
• Follow-up of remediation and compliance with due dates
• Participate in the animation of the AppSec community:
• Best practices
• Secure coding

Technical Skills:

• Familiarity with security tools and development technologies (Qualys Fortify, Nexus IQ, Kubernetes, etc.)
• Tooling and automating vulnerability management processes (Python scripting)
• Understanding security principles and best practices for code security
• Clear understanding of OWASP Top 10 - application security risks
• Knowledges of programming languages and front-end + backend development technologies (Java, Angular, REST APIs and others)
• At least 2 years of Experience in Information Technology Risk and Cyber Security field
• Certification (s): CISM, CISA, CRISK, CISSP, CRISC, CEH, CCSK, CCSP, ISO2700x, ISO31000 or EBIOS
• French - Notions

Soft Skills:

• Analytical and problem-solving skills
• Ability to collaborate / Teamwork

We offer our teams:

Health insurance and other extra salary benefits;

Training and development plan;

Opportunities for professional growth and development;

Dynamic and collaborative work environment;

Possibility of integration into international projects