Junior Cyber Security Engineer - Application Security

• Secure Coding Practices: Collaborate with software development teams to incorporate secure coding practices into the software development lifecycle, contributing to the creation of robust and secure applications.
• Tool Proficiency: Develop proficiency in security tools and frameworks used in application security testing, including but not limited to static analyzers, dynamic scanners, and penetration testing tools.
• Collaborative Threat Modeling: Engage in threat modeling exercises, working alongside senior team members to identify potential security risks in application architectures and contribute to the development of effective security controls.
• Training and Certifications: Pursue relevant training courses and certifications to enhance expertise in application security, aligning with organizational and industry best practices.
• Documentation: Contribute to the documentation of security assessments, findings, and remediation recommendations, ensuring clear and comprehensive reporting.
• Participation in Team Activities: Actively participate in team activities, including knowledge-sharing sessions, collaborative projects, and security awareness initiatives, to foster a culture of continuous learning and improvement.
• Security Tool Implementation: Implement and utilize security tools effectively to assist in the identification and remediation of vulnerabilities, contributing to the efficiency of the security testing process.
• Compliance Adherence: Understand and adhere to relevant security standards, regulations, and industry best practices to ensure applications comply with cybersecurity requirements.

• Bachelor’s degree in computer science, MIS, or Information Security or equivalent work experience.
• At least 1 or more years of relevant work experience
• Professional and strong experience deploying and running various penetration testing tools including Metasploit, Burp Suite, Nessus, Nmap, Kali Linux, Wireshark, Hydra to mention a few. As well as SAST, DAST, SCA scan tooling and reporting.
• Experience with cyber threat intelligence, security research, security operations, and/or incident response
• Security certifications CEH, GIAC, CISSP, CCSP and software application development experience a big plus
• Knowledge of privacy regulations and security frameworks SOC, CCPA, GDPR
• Solid understanding of the OSI Network model as well TCP/IP protocol stack
• Working knowledge of industry standards such as NIST and CIS
• Strong understanding of the OWASP and SANS models related to application threats and vulnerabilities
• Great communication skills both oral and written ensuring point gets across clearly
• A forensic approach to incidents and investigations including relevant tools and procedures
• Ability to work in a highly collaborative environment
• Self-starter and driven to get the job done
• Demonstrated effective organizational and technical skills
• Critical thinking skills, problem-solving aptitude
• Desire to self-educate on the ever-changing landscape of cyber hacking tactics

ACE Money Transfer