application security consultant

Burraq Consulting

<div><div><div>Closing on: May 31, 2026</div></div><div><div><div><div><b>
Job Category: </b>Remote
</div><div><b>Job Type: </b>Freelance
</div><div><b>Job Location: </b>Pakistan
</div><div><b>Salary: </b>Project Based
</div><div><b>Experience: </b>5 Years
</div><div><b>Department: </b>Auditing and Compliance
</div><div><b>Education: </b>Masters in Cyber Security
</div></div></div></div><div><h3 class="jobSectionHeader"><b>About Us</b></h3>
<p>
Burraq Consulting is a leading training and consultancy firm in Pakistan, delivering professional services in HSE, ISO certifications, corporate training, and compliance solutions. We are expanding our technical team and looking for a Senior Information Security Consultant who can conduct ISO 27001 audits and meet the ISO requirements for our clients.</p>
<div>
</div><p></p><h3 class="jobSectionHeader"><b>Job Overview</b></h3>
<p>
We are seeking experienced <b>ISO 27001 Consultants</b> to support multiple client engagements on a project-to-project basis. The consultant will be responsible for implementing, auditing, and maintaining Information Security Management Systems (ISMS) in line with ISO 27001 requirements.</p>
<p>
This role is ideal for professionals who prefer flexible, assignment-based work and have hands-on experience delivering ISO 27001 certification projects across different industries.</p>
<div>
</div><p></p><h3 class="jobSectionHeader"><b>Key Responsibilities</b></h3>
<ul><li>Lead end-to-end <b>ISO 27001 implementation projects</b></li>
<li>Conduct <b>gap assessments</b> against ISO/IEC 27001 standards</li>
<li>Develop and review <b>ISMS documentation</b> (policies, procedures, risk registers, SoA, etc.)</li>
<li>Perform <b>risk assessments and risk treatment planning</b></li>
<li>Provide guidance on <b>Annex A controls implementation</b></li>
<li>Conduct <b>internal audits</b> and support clients during certification audits</li>
<li>Deliver <b>awareness and training sessions</b> to client teams</li>
<li>Liaise with certification bodies and external auditors</li>
<li>Ensure project timelines, deliverables, and quality standards are met</li>
</ul><p></p><h3 class="jobSectionHeader"><b>Requirements</b></h3>
<ul><li>Proven experience in <b>ISO/IEC 27001 implementation or consulting</b></li>
<li>Strong understanding of <b>ISMS framework and risk management methodologies</b></li>
<li>Experience with <b>Statement of Applicability (SoA)</b> and control mapping</li>
<li>Familiarity with <b>ISO 27001:2022</b> standard (preferred)</li>
<li>Lead Implementer and/or Lead Auditor certification (highly preferred)</li>
<li>Ability to manage multiple clients and projects independently</li>
<li>Strong documentation and communication skills</li>
</ul><p></p><h3 class="jobSectionHeader"><b>Preferred Skills</b></h3>
<ul><li>Experience in related standards (e.g., ISO 22301, ISO 20000, GDPR)</li>
<li>Background in IT, cybersecurity, or information security</li>
<li>Experience working with certification bodies</li>
<li>Industry exposure (e.g., IT, healthcare, finance, telecom)</li>
</ul><p></p><h3 class="jobSectionHeader"><b>Engagement Model</b></h3>
<ul><li>Project-based assignments with defined scope and timelines</li>
<li>Flexible working arrangements (remote or on-site depending on client needs)</li>
<li>Compensation based on project scope, complexity, and duration</li>
</ul><p></p><h3 class="jobSectionHeader"><b>How to Apply</b></h3>
<p>
Interested candidates are encouraged to submit their CV along with a portfolio of recent design work to: <b>people@burraqconsulting.com</b> with subject line &ldquo;<b><i>Information Security Consultant</i></b>&ldquo;.</p></div></div>

Senior Information Security (ISO 27001) Consultant

Google

<div>Please note: Applicants to this role must have work authorization in Saudi Arabia as this role is not eligible for work visa sponsorship.<br>
Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following:<br>
<br>
<b>In-office locations: Riyadh Saudi Arabia.</b><br>
<b>Remote location(s): Saudi Arabia.</b><h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field or equivalent practical experience.</li>
<li>5 years of experience assessing and developing cybersecurity solutions across multiple security domains.</li>
<li>Experience in the consumption, processing, and analysis of Cyber Threat Intelligence (CTI) within an operational environment, supporting monitoring, detection, and response.</li>
<li>Experience in an intelligence practitioner role.</li>
<li>Ability to communicate in English and Arabic fluently, as this is a client facing role.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>Experience designing instructional materials and fostering a learning environment.</li>
<li>Experience in analyzing network, endpoint, and security logs or telemetry for security investigations and threat hunting.</li>
<li>Ability to approach addressing challenges, committed to enhancing CTI capabilities.</li>
<li>Ability to work in a cross-functional team environment with a focus on knowledge sharing and collaboration.</li>
<li>Ability to teach technical concepts to the audience.</li>
<li>Excellent written and verbal communication skills, with the ability to collaborate with various teams and stakeholders.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2><p>
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
<br>
<br>
As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.</p><br>
<p>
In this role, you will act as an advisor and will be responsible for guiding the development of Cyber Threat Intelligence (CTI) functions across the globe and empowering cyber-security organizations to leverage threat intelligence at organizations.</p><div><div>
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div></div></div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul>
<li>Conduct a comprehensive assessment of the organization's current threat intelligence capabilities, needs, and risks.</li>
<li>Design proactive CTI capabilities based upon discovery activities, in-line with best practices and desired client priorities.</li>
<li>Design and develop a comprehensive CTI training curriculum aligned with the organization's needs and the chosen tools/frameworks.</li>
<li>Deliver engaging training sessions to security analysts, engineers, and other team members on threat intelligence concepts, methodologies, and tools.</li>
<li>Travel to client sites up to 50% of the time as needed to directly engage and deliver intelligence consulting services.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Senior Cyber Threat Intelligence Consultant, Mandiant (English, Arabic)

Amazon Web Services

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
The Amazon Web Services Professional Services (AWS ProServe) team is seeking a skilled Senior Delivery Consultant to join our Cloud Security team. As a Senior Security Consultant, you&rsquo;ll work closely with customers to design, implement, and automate solutions in AWS to protect customer assets, enable customer security teams to operate more effectively, and ensure customers don&rsquo;t accept unnecessary risk.<br>
<br>
You will work in fast-paced, complex projects that focus on delivering transformative business and security outcomes for customers globally. The ideal candidate is a highly skilled technical security professional with the ability to coach and guide executive security and cloud leaders in their journey, addressing topics such as security strategy and optimizing cloud security operations while being able to dive deep into AWS security technology. Along the way, you&rsquo;ll be expected to invent, extend, and adapt technology to tailor solutions to customer needs as well as coach and mentor junior consultants to enable their success.<br>
<br>
The AWS Professional Services organization is a global team of experts that help customers realize their desired business outcomes when using the AWS Cloud. We work together with customer teams and the AWS Partner Network (APN) to execute enterprise cloud computing initiatives. Our team provides assistance through a collection of offerings which help customers achieve specific outcomes related to enterprise cloud adoption. We also deliver focused guidance through our global specialty practices, which cover a variety of solutions, technologies, and industries.<br>
<br>
Key job responsibilities<br>
As an experienced technology professional, you will be expected to:<br>
1. Act as the technical leader for customer engagements and/or the security workstreams of engagements, leading teams of consultants.<br>
2. Lead internal initiatives to deliver quantifiable impact<br>
3. Develop strategic relationships with internal and external leaders<br>
4. Design and implement complex, scalable, and secure AWS solutions tailored to customer needs<br>
5. Enable and engage delivery partners in project delivery<br>
6. Provide mentorship and coaching to develop others<br>
<br>
A day in the life<br>
You'll work with colleagues and customers to design, develop and implement security solutions that solve real-world problems. You'll have full access to all of AWS's Infrastructure and Agentic-AI tools. You'll spend your days innovating, building and deploying industry-leading technology.
<br>
<br>
About the team<br>
ABOUT AWS:<br>
<br>
Diverse Experiences
<br>
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
<br>
<br>
Why AWS
<br>
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.<br>
<br>
Work/Life Balance
<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.<br>
<br>
Inclusive Team Culture
<br>
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.<br>
<br>
Mentorship and Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>5+ years of cloud architecture and solution implementation experience</li><li>5+ years of external or internal customer facing, complex and large scale project management experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>3+ years of security, compliance and risk management experience</li><li>5+ years of integration, testing and automation experience</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Knowledge of AWS services including compute, storage, networking, security, databases, machine learning, and serverless technologies</li><li>degree in advanced technology, or AWS Professional level certification</li><li>Knowledge of security and compliance standards including HIPAA and GDPR</li><li>Experience communicating technical concepts to diverse audiences in pre-sales environments</li><li>Experience scripting for automation (e.g., Python, Perl, Ruby)</li><li>Experience in the financial services industry</li><li>Hands-on technical expertise in building security capabilities in code, deploying infrastructure as code, and implementing enterprise security solutions (e.g. WAF, IPS, Anti-DDOS, SIEM)</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, NJ, Jersey City - 169,000.00 - 228,600.00 USD annually<br>
USA, NY, New York - 169,000.00 - 228,600.00 USD annually</div><p></p>

Senior Security Consultant, Global Proserve Security

Amazon Web Services (AWS)

<div>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 The Security Assurance Services (SAS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world&rsquo;s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.
 <br/>
 <br/>
 The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance, Risk, and Compliance leader who can address the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures?
 <br/>
 <br/>
 The AWS Security Assurance Service team is seeking a talented Senior Assurance Consultant to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services helps operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business, and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by helping enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements.
 <br/>
 <br/>
 We are looking for an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements, is willing to dive in to the details, can translate those requirements into scalable solutions, and is able to communicate at all levels within an organization.
 <br/>
 <br/>
 Key job responsibilities
 <br/>
 <br/>
 Expertise &ndash; Leads teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs
 <br/>
 <br/>
 Solutions - Lead a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.
 <br/>
 <br/>
 Delivery &ndash; Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment.
 <br/>
 <br/>
 Insights - Lead efforts with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.
 <br/>
 <br/>
 Ability to travel to customer sites as needed.
 <br/>
 <br/>
 <strong>
  About The Team
  <br/>
  <br/>
 </strong>
 AWS Security Assurance Services LLC, a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm, is a team of industry certified assessors, helping our customers achieve, maintain, and automate compliance in the cloud by tying together applicable audit standards to AWS service specific features and functionality.
 <br/>
 <br/>
 Diverse Experiences
 <br/>
 <br/>
 Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 <br/>
 <br/>
 Why AWS
 <br/>
 <br/>
 Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
 <br/>
 <br/>
 Work/Life Balance
 <br/>
 <br/>
 We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.
 <br/>
 <br/>
 Inclusive Team Culture
 <br/>
 <br/>
 Here at AWS, it&rsquo;s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness.
 <br/>
 <br/>
 Mentorship and Career Growth
 <br/>
 <br/>
 We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 <br/>
 <br/>
 Hybrid Work
 <br/>
 <br/>
 We value innovation and recognize this sometimes requires uninterrupted time to focus on a build. We also value in-person collaboration and time spent face-to-face. Our team affords employees options to work in the office every day or in a flexible, hybrid work model near one of our Amazon offices.
 <br/>
 <br/>
 <strong>
  Basic Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5+ years in IT security, compliance and risk management, data privacy, or security controls.
  </li>
  <li>
   3+ years experience advising customers on architectures meeting industry standards and regulations such as NIST 800-53 and GDPR.
  </li>
  <li>
   3+ years experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment.
  </li>
  <li>
   3+ years experience assessing security posture and producing evidence of control effectiveness in cloud environments.
  </li>
  <li>
   Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials
  </li>
  <li>
   Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes.
  </li>
  <li>
   Clear understanding of Agile, CI/CD, DevOps approach and how they impact risk management and compliance.
  </li>
  <li>
   Technical security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
  </li>
  <li>
   Demonstrated ability to think strategically about business, product, and technical challenges.
  </li>
  <li>
   Master's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience.
   <br/>
   <br/>
  </li>
 </ul>
 Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.
 <br/>
 <br/>
 <br/>
 <strong>
  Company
 </strong>
 - Amazon Web Services EMEA Dubai FZ Branch
 <br/>
 <br/>
 Job ID: A10383756
</div>


Senior Assurance Consultant, AWS Security Assurance Services

Fortinet

<div><div>We are looking for a Senior Consultant &ndash; FortiGuard Incident Response to work in a dynamic and exciting new position reporting to the Director of Operations for FortiGuard Security Consulting Services. The analyst will work directly with members of a world class incident response and forensics team. Our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics and threat actors TTPs . In this very hands-on customer facing role the consultant&rsquo;s main objective is to lead and manage the incident response engagements and train/mentor other security consultants. Leveraging your in-depth understanding of the threat actors&rsquo; tactics, techniques, procedures and tools as well as our flagship FortiEDR tooling you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client. In addition, from time to time the candidate will help to create threat research work products such as blogs and presentations. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines.<br>
</div><p></p><p><b>Responsibilities:
</b></p><ul><li>Assist the IR Lead during engagements and mentoring/training junior analysis
</li><li><p>Continue to focus on process improvement for the customer facing incident response services
</p></li><li><p>Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems
</p></li><li><p>Conduct network forensics and log analysis during IR engagements
</p></li><li><p>Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
</p></li><li><p>Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats
</p></li><li>Perform memory forensics and file analysis as needed
</li><li>Monitor underground forums, our FortiGuard Threat Labs, along with other open-source intelligence outlets to maintain proficiency in latest actor tactics and techniques
</li><li><p>Preform basic reverse engineering of threat actor&rsquo;s malicious tools
</p></li><li><p>Develop complete and informative reports and presentations for both executive and technical audience
</p></li><li><p>Availability during nights/weekends as needed for IR engagements<br>
</p></li></ul><p></p><p><b>Required Skills:
</b></p><ul><li>Excellent written and verbal communication skills a must
</li><li>Experience interfacing with customers
</li><li>Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc
</li><li>Ability to data mine using YARA, RegEx or other techniques to identify new threats
</li><li><p>Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus
</p></li><li>Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger
</li><li>Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism
</li><li>Strong knowledge of operating system internals and endpoint security experience.
</li><li>Able to communicate with both technical and executive personnel
</li><li>Static and dynamic malware and log analysis
</li><li>Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required .
</li><li>Highly motivated, self-driven and able to work both independently and within a team
</li><li>Able to work under pressure in time critical situations and occasional nights and weekends work
</li><li>A solid understanding of Active Directory and how to secure is a plus
</li></ul><p><b>Education:
</b></p><ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 5+ years&rsquo; experience with incident response and or Forensics</li></ul></div>

Senior Consultant - FortiGuard Incident Response

Toyota North America

<div><p><b>Overview</b></p><p></p><p><b>
Who we are</b></p><p></p><div><p>
Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world&rsquo;s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We&rsquo;re looking for talented team members who want to Dream. Do. Grow. with us.</p><p></p><p>
An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.</p></div><p></p><p><b>
To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.</b></p><p></p><p><b>
Who we&rsquo;re looking for</b></p><p>
Toyota Financial Services (TFS) Technology team is looking for a highly motivated person to fill a role as a Application Security Analyst. Your responsibilities will be to ensure the security of company software applications, web services, and APIs. You will work closely with development teams to identify vulnerabilities, suggest remediation efforts, and integrate security controls into the DevOps pipeline. The role involves ensuring the security and integrity of our products and third-party software, providing guidance on security risks.</p><p></p><p><b>
What you&rsquo;ll be doing</b></p><ul><li><p>
Collaborate with developers to &quot;shift left&quot;&mdash;integrating security early in the software development life cycle (SDLC)</p></li><li><p>
Integrate security tools like SAST, DAST, and SCA into development processes.</p></li><li><p>
Review code for security vulnerabilities and provide guidance to developers on remediation and secure coding practices.</p></li><li><p>
Prepare detailed vulnerability reports and dashboards for leadership, prioritizing risks based on business impact.</p></li><li><p>
Stay updated on emerging threats and vulnerabilities relevant to application security.</p></li><li><p>
Provide guidance and training on interpreting reports and strategies for remediation.</p></li></ul><p></p><p><b>
What you bring</b></p><ul><li><p>
Typically, 3-6 years of experience in application security, with significant hands-on experience using SAST/SCA/DAST tools and methodologies.</p></li><li><p>
Proven expertise in testing complex web applications, APIs, and mobile applications for security vulnerabilities.</p></li><li><p>
Strong understanding of application security standards (e.g., OWASP Top Ten, SANS CWE Top 25).</p></li><li><p>
Familiarity with programming languages and frameworks commonly used in web and mobile applications, including Java, Python, Bash/Shell Scripting, PHP, Javascript, etc.</p></li><li><p>
Strong understanding of CI/CD tools (e.g., Jenkins, Harness, GHA).</p></li><li><p>
Familiarity with containerization and orchestration (Docker, Kubernetes).</p></li><li><p>
Knowledge of cloud platforms (AWS, Azure, GCP) and their security features.</p></li><li><p>
Knowledge of Infrastructure as Code (Terraform, Ansible).</p></li></ul><p></p><p><b>
Added bonus if you have</b></p><ul><li><p>
Strong analytical and problem-solving skills.</p></li><li><p>
Excellent communication and collaboration abilities.</p></li><li><p>
Ability to work in a fast-paced, agile environment.</p></li><li><p>
Ability to lead security testing initiatives and mentor junior security engineers.</p></li></ul><p></p><p><b>
What we&rsquo;ll bring</b></p><p>
During your interview process, our team will provide detailed information about our industry-leading benefits and career development opportunities. Here are a few highlights:</p><ul><li><p>
A work environment built on teamwork, flexibility, and respect.</p></li><li><p>
Professional growth and development programs to help advance your career, including tuition reimbursement.</p></li><li><p>
Team Member Vehicle Purchase Discount.</p></li><li><p>
Toyota Team Member Lease Vehicle Program (if applicable).</p></li><li><p>
Comprehensive health care and wellness plans for your entire family.</p></li><li><p>
Toyota 401(k) Savings Plan with a company match, plus an annual retirement contribution from Toyota regardless of your own contributions.</p></li><li><p>
Paid holidays and paid time off.</p></li><li><p>
Referral services for prenatal services, adoption, childcare, schools, and more.</p></li><li><p>
Tax advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA).</p></li><li><p>
Relocation assistance (if applicable).</p></li></ul><p></p><p><b>
Belonging at Toyota</b></p><p></p><p>
Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Toyota is proud to have 10+ different Business Partnering Groups across 100 different North American chapter locations that support team members&rsquo; efforts to dream, do and grow without questioning that they belong.</p><p></p><p>
Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.</p><p></p><p>
Have a question, need assistance with your application or do you require any special accommodations? Please send an email to talent.acquisition@toyota.com.</p></div>

Application Security Analyst

Tata Consultancy Services (TCS)

<div></div><div><div><div><p>Experience &amp; Knowledge Vulnerability Management,Qualys guard , ServiceNow &middot; Executed and experienced in Manual Penetration Testing &middot; Performed Threat modelling &amp; Threat profiling &middot; Security testing related certifications &ndash; CEH, AppScan Certified etc &middot; Conducted secure code reviews &middot; Formulated Pen Testing plans &amp; strategies &middot; Good Security Report
</p></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Analyst</div>
</div><div><div><b>Job Id</b></div>
<div>402868</div>
</div><div><div><b>Desired Skills</b></div>
<div>VAPT | VAPT Nexpose Rapid 7</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF BUSINESS STUDIES, BACHELOR OF COMMERCE, BACHELOR OF COMPUTER APPLICATION</div></div></div><div></div>

Application security / Penetration Testing/VAPT(OSCP)

Search 10000+ Application security consultant jobs near you this May. New roles added regularly across leading industries. Apply today.