- Analyze and identify security vulnerabilities in source code using both automated and manual static analysis tools and techniques. Train and assist developers in writing secure software and remediating existing vulnerabilities.
- Discover security vulnerabilities through design review, manual source code review, and follow up on the remediation process using automated tools to find security vulnerabilities in source code and system
- Conduct Secure coding training sessions for developers
- Implement various security control verification and risk detection
- Implement security-related libraries for internal use
- Provide support on application-level security monitoring
- Conduct thorough code and design reviews of high-assurance embedded software searching for potential vulnerabilities that could be exploited using logic (e.g. fuzzing, stack overflows, etc.) and physical means (side-channel, fault injection, etc.)
- Identify the source of any malicious intent, or any weakness leading to access, and information leaks
- Lead the remediation of application vulnerability screening and penetration testing
- Assist the Information Security Manager with all application security tasks
- Good understanding of the whole software development lifecycle, CI/CD tools, cloud, Kubernetes, and various technology stacks
- Familiar with OWASP Top 10
- Experience in mobile application development will be an added advantage