Devoteam Cyber Trust | Application Security Engineer | Mobility Sector

Навыки

• Angular
• API (интеграции)
• ASP.NET
• AWS
• Bash / shell
• CI/CD
• C#

О компании и продукте

• Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries

Задачи

• Application Security
• Define and promote Secure SDLC practices
• Integrate security requirements into the development lifecycle
• Participate in architecture reviews and solution designs
• Conduct threat modeling sessions
• Support teams in implementing authentication, authorization, and data protection mechanisms
• Vulnerability Management
• Analyze results originating from
• Penetration Tests
• Vulnerability Assessments
• SAST / DAST
• Dependency Scanning
• Container Scanning
• Classify and prioritize vulnerabilities
• Provide technical support during remediation
• Track remediation plans and their respective SLAs
• Penetration Testing Coordination
• Define test scope
• Coordinate with external vendors
• Validate findings
• Ensure tracking and closure of recommendations
• Training & Enablement
• Conduct Secure Coding workshops
• Promote OWASP Top 10 and secure development best practices
• Support the creation of Security Champions within teams

Требования

• Cloud knowledge with hands-on experience in production application deployments
• Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients
• The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management
• ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries

Будет плюсом

• Knowledge of major cloud platforms (AWS and/or Azure preferred
• Google Cloud or others are relevant and transferable)
• Application Security Expertise
• Practical knowledge of
• OWASP Top 10, OWASP ASVS, and Secure Coding best practices
• Threat Modeling
• Authentication & Authorization (including OAuth2, OpenID Connect, and JWT)
• API Security & Secure API Design
• Applied Cryptography (TLS, key/certificate lifecycle, secure hashing)
• Secrets Management (secret stores, secret rotation, preventing secrets in code)
• Security Tooling
• Experience with tools such as
• SonarQube, Checkmarx, Fortify, Veracode, Snyk, Dependabot, OWASP ZAP, Burp Suite, or Trivy
• Behavioral Competencies & Soft Skills
• Excellent communication skills
• Ability to influence without hierarchical authority
• Training and mentoring capability
• Pragmatic approach to risk management
• Ability to collaborate easily with development teams
• Strong analytical mindset
• The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination
• We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization
• All of our vacancies are open to people with disabilities
• Join us in our mission to safeguard our clients' critical digital assets by applying deep technical expertise to their most strategic projects

Паспорт вакансии

История публикации

Откуда что взялось

Отмечено то, что вывели мы. Без пометки — значение назвал работодатель.

Почему на этом месте в выдаче

Порядок выдачи объявлен контрактом: свежесть решает между днями, полнота и зарплата — внутри дня.