Security Engineer

Company Name: ALGYR TECHNOLOGY Employment Type: Full Time Monthly Salary: 8,000 - 11,999 AED Minimum Work Experience: 2-5 Years Minimum Education Level: Bachelors Degree Listed By: Employer Company Size: 201-500 Employees Career Level: Mid-level Description: Hello Candidate, Please send your cv to HR @ Gyrtechnology.com with following details without this CV's won't be considered. 1. Current Location 2. Skype/Phone Number 3. Matching to CV : 10/20/100% 4. Current Salary : 5. Expected Salary: 6. Notice Period: The Application Security Engineer will join a team of other Information Security professionals reporting directly to the Global Director of Application Security and Architecture. The Application Security Engineer will join an elite team of some of the smartest minds in the business that have been tasked with performing deep technical security assessments for our most critical applications to ensure that they are highly resilient against security threats. You will work on some of the most cutting edge digital technologies and provide value by solving real world problems that our industry as a whole is facing. Your key stakeholders will be application development teams, digital innovation teams, internal vulnerability assessment teams and the Global Information Security organization as a whole. The position will have primary responsibility for performing application security reviews and penetration testing, working with the technical development organization and enforcing the application security review process. You will be a key member of the team in communicating security weaknesses, exploits, and vulnerabilities to the business and technical teams using both technical and non-technical terms that business understands. The ideal qualified candidate will embody the following Information Security and highly technical skillsets: Identify, document, measure and communicate technical Information Security risks across the organization’s data networks, systems, and applications using standard company toolsets and common industry exploitation techniques to identify attack surfaces Conduct a variety of technical penetration testing engagements (external, internal, web application, cloud, social engineering, wireless, etc.) designed to identify where sensitive data can be obtained using unauthorized methods Act as subject matter specialist communicating and delivering highly effective information security practices and techniques and solid understanding of the OWSAP top 10 vulnerabilities. Hands-on experience in advanced threat detection, exploitation, and industry toolsets to identify the technical risks through conventional and non-conventional techniques Provide security remediation validation to ensure remediation steps are effective in mitigating the possible exploitation of sensitive data and persevering the integrity and confidentiality of critical information systems Work with 3rd party vendors to coordinate penetration tests for all cloud-based solutions (SaaS, PaaS, and IaaS) Monitor and research industry information sources for zero-day threats and emerging security trends and vulnerabilities impacting the organization Versed understanding of coding and scripts, and provide best coding practices in agile development model Possess an understanding of secure architecture designs Knowedge of emerging technologies such as DevSecOps, Agile Development, Cloud Compute Technologies and Platform, etc (Amazon AWS). Technical Responsibilities: This role requires the candidate to be technical in order to engage in discussions with engineers, developers, operations, and technical innovators. The candidate should have hands on development experience and technical security experience but does not necessarily need to be able to code. The candidate should have good understanding of the application architecture and designs, coding languages, technology integrations, emerging technologies and cloud application and cloud environments. The candidate will be expected to ensure the applications and web applications are built to the Corporate Time Inc. Information Security Standard. The candidate will review and communicate penetration test reports to business units. This function will require a good technical and security working knowledge to address security vulnerabilities and provide security mitigation techniques. This will involve direct responsibility to ensure application security validation review, risk assessments and remediation techniques are performed. Key security concepts include: Experience Required 2-3 years of combined application and network penetration, AppSec, wireless security, and vulnerability management experience Knowledge and ability to conduct internal, external, social, wireless, and application penetration testing using a wide variety of exploitation techniques, tools, and procedures. Knowledge of security attack methodologies, tools and processes Must possess security experience – a strong fundamental expertise and experience in security penetration testing / research, application architectures and technology, knowledge in OWASP Top 10 vulnerabilities, and web application vulnerabilities and web application business logic flaws and threats Penetration tools such as Kali, Burp Suite, Qualys Guard, Cenzic, Metasploit, OWASP ZED, sqlmap, nosqlmap, WPScan, Nessus, NMAP, etc. Must be technical – technical capability to understand technologies, cloud services, enterprise systems, agile development concepts/tools/practices, and digital frontier Must be a self-starter, able to work under pressure and with limited supervision both individually and with other team members. Must be able to work well with others in a globally and culturally diverse environment. Must be able to successfully prioritize and manage to completion multiple complex tasks and deliverables. Must be able to speak clearly to conduct teleconferences. Versed in two or more programming and scripting languages such as HTML5, Java, Python, Ruby, Perl, Bash, PowerShell GPEN, OSCP, GWAPT, CEH, or GSEC certification is preferred You are: Collaborative: You have a flexible, open approach to work. You thrive building clear efficiencies in unstructured environments. You approach your career like a journey, taking on big challenges with zero ego – and crushing it. You’re energized by working in the start-up atmosphere of the new Time Inc. International, a dynamic new digitally-led company-within-a-company. Proven: Yes, you love to roll up your sleeves and work in a new, uncertain environment. That said, you’re not unfamiliar with working in or with large organizations, leading projects to completion with your strong analytics and financial modeling skills. Communicative: Peers, bosses and direct reports flock to you for your dynamism and clarity. Your crystal clear approach to communication is immediately recognized, whether you’re delivering a presentation to shape the strategic direction of an investment, hosting a meeting or sending a simple email.