Qureos Mentor

Virtu Thinko

Cyber Sec Arch\Engr ll &ndash; ICS\OT Overview This position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for Company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the Position&bull;Act as primary customer interface to ensure proposed solutions meet their business needs.&bull;Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.&bull;Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.&bull;Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.&bull;Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.&bull;Maintain cyber security certifications.&bull;Requires 30&ndash; 65% travelQualifications &amp; Experience:&bull;Bachelor&rsquo;s degree in a computer related field such as Computer Science, Computer informationsystems degree with a minimum of 3 years&rsquo; experience in industrial automation network systems.Must have:&bull;Networking certs (CCNA).&bull;3+ years Industrial Networking.&bull;Linux/Windows Security Basics.&bull;Virtualization Experience (VCP).&bull;Familiarity within Industrial Process Control.&bull;Familiarity with Industrial Site&rsquo;s Safety Requirements.&bull;Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.&bull;Familiarity in LAN/WAN architectures &amp; Purdue ICS model.&bull;Process Control System Design/Implementation Knowledge.&bull;Familiarity designing and optimizing complex LAN environments.&bull;Cisco Certified Network/Design/Security Professional (at least one).&bull;Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.Nice to have:&bull;CompTIA Security +.&bull;Cyber Security Risk Analysis.&bull;Certified Ethical Hacker (CEH).&bull;Splunk Fundamentals &amp; Administration.&bull;3+ years Performing Audits/Assessments.&bull;Microsoft Certified Systems Engineer (MCSE).&bull;Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).&bull;Global Industrial Cyber Security Professional (GICSP) certification.&bull;Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).&bull;Experience performing cybersecurity/network/system services at customer sites.&bull;CISSP Certified Information Systems Security Professional or similar security certification.&bull;Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).&bull;Excellent troubleshooting skills to resolve complex network/application/system integration issues.Competencies:&bull;Result-oriented.&bull;Effective communicator.&bull;Influences without authority.&bull;Customer service oriented.&bull;Open-minded- Integrative thinker.&bull;Confident &ndash; ability to work with minimal supervision.Job Types: Full-time, Contract Contract length: 12 monthsPay: ﷼7,000.00 - ﷼12,000.00 per monthWork Location: In person

Cyber Sec ArchEngr ll – ICSOT

JOB DESCRIPTION Application Security EngineerDepartment:Technologies &ndash; InfrastructureReports to: Security Operations Manager1. Position SummaryThe Application Security Engineer is responsible for safeguarding the organization&rsquo;s application landscape by embedding security into every step of the software development lifecycle (SDLC). The role requires a deep understanding of application security principles, penetration testing, threat modelling, secure coding practices, and modern DevSecOps methodologies.The ideal candidate will work closely with development, project teams, and broader technology functions to proactively identify vulnerabilities, conduct in‑depth security assessments, and implement preventative controls. The role demands hands‑on experience with SAST/DAST tools, application penetration testing, API security, and the ability to integrate security controls within CI/CD pipelines.This position operates in a fast‑paced environment requiring strong technical expertise, excellent communication skills, and the ability to translate complex security findings into actionable remediation guidance. The successful candidate will play a critical role in maturing the organization&rsquo;s application security posture and ensuring compliance with industry best practices and global security standards.Responsibilities:&middot; Integrate security into all phases of the SDLC by collaborating with development, QA, project, and architecture teams.&middot; Conduct comprehensive application security assessments, including manual and automated code reviews, DAST/SAST analysis, and penetration testing for web, mobile, and API-based applications.&middot; Perform design and architecture reviews, including threat modelling using frameworks such as STRIDE and PASTA.&middot; Identify vulnerabilities and provide remediation guidance aligned with secure coding standards and frameworks such as OWASP Top 10, OWASP ASVS, NIST 800‑115, and CWE.&middot; Develop and maintain application security policies, secure coding guidelines, and best practice references.&middot; Support integration of security tooling into CI/CD pipelines.&middot; Review and improve security processes, focusing on optimization and automation opportunities.&middot; Conduct cloud and infrastructure penetration tests when required, in coordination with infrastructure teams.&middot; Manage and validate vulnerability findings using enterprise vulnerability management systems.&middot; Assist development teams in debugging and resolving security vulnerabilities, ensuring timely remediation.&middot; Participate in incident response activities related to application-layer attacks.&middot; Maintain up‑to‑date knowledge of emerging threats, exploit techniques, and evolving security technologies.&middot; Provide clear technical documentation, reports, and executive summaries of assessment results.&middot; Support internal audits, compliance requirements, and risk assessments related to application security.&middot; Promote secure-by-design principles and contribute to the organization&rsquo;s DevSecOps strategy.&middot; Ensure full compliance with Information Security and Assurance policies, industry standards, and applicable regulatory requirements by embedding governance and controls across the application lifecycle.&middot; Develop, maintain, and enforce application and system hardening baselines aligned with CIS Benchmarks and other security configuration standards.&middot; Participate in 24&times;7 support during critical application security incidents, investigations, and urgent remediation activities as required.&middot; Contribute to security-related initiatives and projects, performing additional duties as assigned to support evolving business and technology needs within the security program.Required Experience &middot; 5-7 years of professional experience in application security, penetration testing, or related security engineering roles.&middot; Demonstrated hands‑on experience in application penetration testing using tools such as Burp Suite, OWASP ZAP, and related exploitation frameworks.&middot; Strong knowledge of OWASP Top 10, OWASP ASVS, OWASP SAMM, and secure SDLC frameworks.&middot; Experience performing threat modelling and reviewing application architecture designs.&middot; Hands‑on expertise with SAST/DAST tools and integrating them into CI/CD workflows.&middot; Working knowledge of vulnerability management process and tools.&middot; Practical experience reviewing code in languages such as JavaScript, TypeScript, Java, or similar.&middot; Good understanding of microservices, REST APIs, authentication/authorization mechanisms, and modern application frameworks.&middot; Basic scripting proficiency (Python, Bash, or PowerShell).&middot; Familiarity with container security, cloud-native security concepts, and DevSecOps practices.&middot; Understanding of networking, TCP/IP fundamentals, and common attack vectors.Education:&middot; BSc/BA in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience.Industry Qualifications: &middot; OSWE, OSCP, OSWA, GPEN, GWAPT, GCPN, or similar security certifications.&middot; Certifications in secure coding, cloud security, or application security standards.&middot; DevSecOps‑related certifications are an advantage.Key Behaviours / Competencies&middot; Strong analytical and problem‑solving skills with attention to detail.&middot; Ability to work independently, prioritize workload, and meet defined deadlines.&middot; Excellent communication skills, with the ability to explain technical vulnerabilities to non‑technical stakeholders.&middot; Demonstrated ability to operate effectively in high‑pressure environments.&middot; A mindset focused on continuous improvement, innovation, and automation.&middot; Strong collaboration and teamwork skills across multidisciplinary teams.&middot; Ability to evaluate applications from both attack and defense perspectives.&middot; Demonstrate a customer‑first mindset by enabling secure, frictionless digital experiences.&middot; Balance security requirements with business needs to support secure innovation.&middot; Provide clear, empathetic, and actionable guidance to internal stakeholders.&middot; Ensure security processes support transparency, agility, and minimal disruption to delivery teams.5. Primary Contactso Information Security Teamo Development Leads / Testing Teamso Project Managerso Security Operations Center (SOC)o Architecture &amp; Governance Teamo Internal and External AuditorsJob Types: Temporary, Contract Contract length: 12 monthsPay: BD1,000.000 - BD1,500.000 per month

Application Security Engineer

Join Virtu Thinko and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Virtu Thinko

About Company

Cyber Sec ArchEngr ll – ICSOT

Application Security Engineer