| Job Title: |
|
Application Security Specialist |
| Category: |
|
Operations |
| Job For: |
|
Student/Alumni |
| Total Positions: |
|
1 |
| Job Location: |
|
Islamabad |
| Gender: |
|
Both |
| Minimum Education: |
|
Bachelors |
| Degree Title: |
|
Hold a degree in Masters/Bachelor’s Degree in Electrical/Computer Engineering |
| Career Level: |
|
Experienced Professional |
| Minimum Experience: |
|
3 Years |
| Salary Range: |
|
PKR 0 to 0 per Month |
| Apply By: |
|
Oct 7, 2014 |
| |
|
|
| |
|
|
|
|
| Job Description: |
The ideal candidate should:
- Hold a degree in Masters/Bachelors Degree in Electrical/Computer Engineering
- Professional certifications from ISACA, ISC2, EC Council, IRCA etc. preferred
Have 3-5 years of experience in related field, especially in Information Security
Job Description
- Ensure that applications meet the highest standards of security.
- Review the applications source code manually as well as using tools.
- Compile reports and return feedback to the application owners with the found vulnerabilities and remediation.
- Communicate with application owners and participate in meetings.
- Create procedures and frameworks to formalize the process of the Application code review.
- Working closely with security team members in security reviews, vulnerability assessments, incident response, and forensics in relation to application security.
- Create and maintain a training program for Application code review.
- Oversee security monitoring, incident response/handling, vulnerability assessment and remediation.
- Analyze reports from information security systems including: log consolidation, patch compliance, change control, vulnerability, IDS, and content management
- Assist with incident response including performing investigative follow-up, assigning responsibility for corrective action, and auditing for effective completionIf the engineer knows only two of the following languages ASP. NET, PHP, Oracle and Java the engineer must be willing to learn the third.
Essential Skills
- Experience with system and database security.
- Experience in manual security code reviews.
- Expertise and technical knowledge in application security controls, authentication methodologies, LDAP, SSO, role based security cryptography.
- Strong knowledge of OWASP Top 10.
- Knowledge of SANS tools and methodologies.
- Understanding of common web technologies and protocols including .NET, PHP, HTTP(S), SAML, SOA, SOAP, Web services. And others (please list others).
- Experience with Network devices and security architecture (IT MPLS)
Desirable Skills Knowledge of
- IRCA- ISO27001 LA
- EC Council CEH
- EC Council CHFI
- Core Impact
GIAC Certified Web Application Penetration Tester (GWAPT) or Cisco CCSP (ISC)2 - CSSLP |
| Company Information |
|
|
Company Name: Jazz
Company Description:
Jazz is Pakistan's leading telecom service provider, spearheading service excellence and product innovation in the country. With a subscriber base above 50 million and a legacy of more than 20 years, Jazz maintains market leadership through cutting-edge, integrated technology, the strongest brands and the largest portfolio of value added services in the industry. Housing a nation-wide network of contact centers and an unparalleled fibre optic backbone of more than 10,000 kilometers,
Jazz has already invested billions of dollars in the country to date. It also provides uninterrupted countrywide connectivity, unmatched customer services and international roaming in over 150 countries. As a responsible entity, the company passionately supports education, health and environmental initiatives and promotes sustainable business practices.
Jazz offers exclusive personalized tariff plans that empower customers and cater to the communication needs of a diverse group of people, from individuals to businessmen to corporate and multinationals. Through its innovative services and products, Jazz is set to bring about a digital revolution that will enable and transform societies towards a more progressive Pakistan.
|
|
