Senior Cybersecurity Assurance Specialist

Job Description

Reverside is an established IT services provider offering software development solutions, IT resources, digital transformation, and systems support. We are seeking a Senior Cybersecurity Specialist to be responsible for ensuring security and privacy from the design stage, through penetration testing, security assessments, threat modeling, and security governance. The successful candidate will ensure that technology projects and solutions comply with required security standards, policies, frameworks, and controls, proactively identifying and mitigating security and privacy risks throughout the project lifecycle.

Key Responsibilities

• Manage Security and Privacy Assurance by Design (SPDA) processes.
• Conduct internal and external penetration testing of infrastructure, networks, web applications, APIs, and systems.
• Perform vulnerability assessments and securely validate security weaknesses.
• Conduct automated and manual security testing.
• Perform threat modeling and security risk assessments.
• Review technology projects and ensure compliance with security requirements and foundations.
• Provide guidance on security architecture and secure integration.
• Identify and mitigate security risks from design to implementation.
• Stay current on emerging threats, attack techniques, and security technologies.
• Support cybersecurity knowledge sharing, training, and mentoring.

Qualifications and Experience

• 5+ years of experience in penetration testing or ethical hacking.
• Extensive experience in network, web application, cloud, and mobile device security.
• Relevant cybersecurity certification or qualification.

Technical Skills

• Kali Linux
• Burp Suite
• Metasploit
• Nessus
• Network and web application security
• Cloud and mobile device security
• Python
• Bash
• Ruby
• PowerShell
• JavaScript
• TCP/IP
• DNS
• HTTP/S
• SSL/TLS
• OWASP and common vulnerabilities, including SQL injection
• XSS
• CSRF
• Threat modeling and risk assessment
• Security architecture and security by design. Preferred Certifications:
• OSCP
• CEH
• CISSP
• CISA

Key Skills

• Penetration Testing
• Ethical Hacking
• Security Assurance
• Security by Design
• Threat Modeling
• Vulnerability Management
• Web and API Security
• Network Security
• Cloud Security
• Security Architecture

Requirements

• Penetration Testing
• Ethical Hacking
• Security Assurance
• Security by Design
• Threat Modeling