Provide insights into areas of potential vulnerability and recommend corrective action.
Keep up to date with industry trends, regulatory changes and emerging cybersecurity threats.
Plan, execute and manage the risk-based audit assignments as per the Audit Plan to ensure the audit fulfil the approved audit objectives and audit scope and the standards as prescribed in the Audit Methodology.
...
Internal Penetration Testing: Perform regular, deep-dive manual penetration tests on our web applications. You must be able to go beyond automated scans to find complex logic flaws, session management issues, and bypasses.
Infrastructure Hardening: Conduct recurring vulnerability assessments of our servers (Windows/Linux) and networking devices.
Remediation & Collaboration: Work directly with our development team to provide technical "how-to" guidance on fixing vulnerabilities, such as implementing mTLS, securing API endpoints, and hardening database configurations (SQL Server/PostgreSQL).
...
Experience with cybersecurity and GRC areas such as risk assessments, control testing, incident and vulnerability management; exposure to tools (e.g. SIEM, EDR/XDR, GRC platforms) is a plus.
Strong analytical, documentation, and communication skills, with the ability to translate technical risks into business impact and work effectively with stakeholders.
Provide insights into areas of potential vulnerability and recommend corrective action.
Keep up to date with industry trends, regulatory changes and emerging cybersecurity threats.
Plan, execute and manage the risk-based audit assignments as per the Audit Plan to ensure the audit fulfil the approved audit objectives and audit scope and the standards as prescribed in the Audit Methodology.
...
Assist Cyber Security Lab team in attack surface management, threat hunting and detection, site take down, brand protection, incident response, compromise assessment
Graduates majoring in cyber security or computer forensics or of related course
...