Job Description

• IT Security Engineer:
  1. Perform penetration and security tests on both web and mobile applications.
  2. Control periodic security reviews.
  3. Identify attack vectors.
  4. Prepare documentation on all security tests.
  5. Keep up to date with the hacking trends and ensure all Company's applications are protected.
  6. Assist with testing security of applications upon each product/version release.

• Network Security Engineer:
  1. Perform security tests and monitor security measures on networks.
  2. Control periodic security reviews.
  3. Identify attack vectors.
  4. Prepare documentation on all security tests.
  5. Keep up to date with the hacking trends and ensure all Company’s applications are protected.
  6. Assist with testing security of applications upon each product/version release.

Job Requirements

• IT Security Engineer:
  1. At least 1 year of working experience in IT security.
  2. Experience with web application security testing, security monitoring, and intrusion detection.
  3. Understanding of OWASP Top 10, SANS 25 and familiar with common security libraries and applications.
  4. Experience with penetration testing tools such as Kali Linux, OWASP Zap, Burp Suite, Arachni and others open source tools.
  5. Nice reconnaissance methodology.
  6. A good understanding of attacks such as injection (e.g. form parameter/SQL) and Endpoint security testing
  7. API testing in security perspective
  8. Have knowledge of the latest industry trends and best practices in information security.
  9. Positive attitude towards rapid learning.
  10. Experience in bug bounty programs and CTFs will be an added advantage.
  11. Having InfoSec certifications (OSCP, CISSP, Security+ or other technical certifications relating to security testing) will be an added advantage.

• Network Security Engineer:
  1. At least 2 years of experience in network security.
  2. A clear understanding of the OSI model, TCP/IP, VLAN, VPN, and networking protocols.
  3. Hands-on experience with AWS security models.
  4. Experience in gateway technologies including SSL-VPN, load balancers, firewalls, and proxy servers.
  5. Knowledge of HTTP traffic and SSL standards.
  6. Experience with network security testing tools such as Nessus, OpenVAS, WireShark, Fiddler, Burp Suite.
  7. Knowledge of the latest industry trends and best practices in information security.
  8. Positive attitude towards rapid learning.
  9. Experience in bug bounty programs and CTFs will be an added advantage.
  10. Having InfoSec certifications (OSCP, CISSP, Security+ or other technical certifications relating to security testing) will be an added advantage.

Company Benefits

Additional Info