Technical Security Consultant

Market-leading telecommunications firm seeking technical security consultant. The role will be focused on working closely with DevOps teams and embedding security throughout the software development lifecycle.

Key requirements:

• SDLC (defining Standards, good practices, checklist, operating model for Dev teams)
• Embedding security within DevOps (e.g. CI/CD pipelines), developing security requirements;
• On-demand Security assessment of various components like Web apps, Containers, Platforms etc;
• Reviewing security assessment reports and create a remediation pipelines.
• Entry level skill in writing code will be preferred.
• Experience in web application security assessments like SAST, DAST etc.
• Experience using tools like GitLab
• Hands on techniques for identifying SQL injections, XSS, CSRF, authentication, OWASP top issue.

As an ideal candidate, you will have an industry certification such as CISSP and have expert knowledge DevSecOps. You will also have a proven track record of embedding security at every stage of the software development lifecycle.