Graduate / Postgraduate in Computer Science / Cybersecurity or related fields.
3-6 years of Software development experience and minimum 2 years' experience in Cybersecurity.
Should have mandatory expertise in the following:
Developing products and services for customers
Security architecture and design
Threat modeling / security risk analysis
Secure software development lifecycle processes
Windows Operating System and Networking (Basics)
Scripting knowledge (Python / Powershell / Bash)
Added advantage of certification:
Certified Information Systems Security Professional (CISSP) or Certified Secure Software Life cycle Professional (CSSLP) or equivalent demonstrated expertise is beneficial.
Areas of Responsibility:
Support project teams in conducting the corresponding security activities during the development process, project management process and services and in product and
solution release.
- Participate in incident response teams, incident escalation
Participate in threat and risk analysis workshops
Provide expertise and support in security tools to product teams
Conduct product and solution security training and development of training material.
Develop and maintain security guidelines and guidance for product development teams.
Collect product & solution security related lessons learned and feed into continuous improvement activities (e.g. update of guidelines, reporting to PSSOs, integration in awareness material).
Stay up to date on the latest security threats/technologies.
Support the development of the PSS community within the organization, with experience exchange internally and externally.
Support multiple projects at the same time and should occupy the function for the main part of defined working time.
Collaboration and Connects:
(internal/external):Internal: Cybersecurity officer of the BL, other Cybersecurity experts across the Org., Quality and Risk Management, Product Owners, Architect, Project Managers, Development and Test team.
External:Security Community, External companies (collaboration, standardization), Customer's security representatives