application security specialist

Secure Shield Security

Secure Shield Security is seeking a detail-oriented and highly organized RFP Specialist to manage and coordinate responses to Requests for Proposals (RFPs) within the security industry. This role plays a critical part in supporting business growth by preparing high-quality, compliant, and competitive proposals for clients.The ideal candidate has strong proposal writing skills, excellent attention to detail, and the ability to collaborate with cross-functional teams to deliver winning bids. Experience in proposal management, bid coordination, or government/private security contracts is highly preferred.Key ResponsibilitiesReview and analyze Requests for Proposals (RFPs) to identify requirements, deadlines, and submission guidelines.Coordinate with operations, sales, legal, and finance teams to gather required information for proposals.Draft, edit, and format professional proposal documents and RFP responses tailored to client requirements.Ensure all proposals include accurate pricing, technical information, and company credentials.Maintain clear communication with internal stakeholders to ensure timely submission of proposals.Act as the primary point of contact for RFP-related questions and clarifications.Support the development of competitive bid strategies and pricing models.Conduct market research and competitor analysis to improve proposal quality.Ensure all submissions comply with client requirements, legal standards, and internal policies.Maintain a structured database of past RFPs, templates, and supporting documentation.Track RFP timelines, submissions, and outcomes.Prepare post-bid analysis reports to identify improvements for future proposals.Continuously improve internal RFP processes, templates, and documentation standards.RequirementsBachelor&rsquo;s degree in Business Administration, Marketing, Communications, or a related field.(preferred)2&ndash;5 years of experience in RFP management, proposal writing, bid coordination, or tender submissions.Experience working with security services, facility management, or government tenders is a strong advantage.Strong technical writing and document formatting skills.Excellent organizational and project management abilities.Ability to manage multiple proposals and tight deadlines simultaneously.Strong communication and collaboration skills.Proficiency in Microsoft Office (Word, Excel, PowerPoint) and document management systems.High attention to detail and commitment to producing accurate, high-quality proposals.Job Type: Full-timePay: Rs80,000.00 - Rs100,000.00 per monthApplication Question(s):<ul><li>How many years of experience do you have managing or responding to RFPs or proposals?</li><li>Have you previously prepared or managed RFP responses for security services, facility management, or a similar industry?</li><li>What tools or software have you used for proposal preparation and document management?</li><li>Are you able to work with cross-functional teams (sales, operations, finance, legal) to gather proposal information under tight deadlines?</li></ul>Work Location: Remote

RFP Specialist – Security Industry

Openkyber

<div>Security Certificate Management No 5-10 Years Is Required Security Testing No 5-10 Years Is Required Security Vulnerablity Analysis No 5-10 Years Is Required Web Application Security No 5-10 Years Is Required Web Application Security and Cryptography No 5-10 Years Is Required Network Security No 5-10 Years Is Required Information Management and Security No 5-10 Years Is Required AWS Security Architect No At least 1 year Nice To Have DB Security No At least 1 year Nice To Have File Vault/Storage Management &amp; Security Management No 2-5 Years Is Required Information Management &amp; Security No NA Nice To Have
For applications and inquiries, contact: hirings@openkyber.com</div>

OCI Storage Engineer

Virtu Thinko

JOB DESCRIPTION Application Security EngineerDepartment:Technologies &ndash; InfrastructureReports to: Security Operations Manager1. Position SummaryThe Application Security Engineer is responsible for safeguarding the organization&rsquo;s application landscape by embedding security into every step of the software development lifecycle (SDLC). The role requires a deep understanding of application security principles, penetration testing, threat modelling, secure coding practices, and modern DevSecOps methodologies.The ideal candidate will work closely with development, project teams, and broader technology functions to proactively identify vulnerabilities, conduct in‑depth security assessments, and implement preventative controls. The role demands hands‑on experience with SAST/DAST tools, application penetration testing, API security, and the ability to integrate security controls within CI/CD pipelines.This position operates in a fast‑paced environment requiring strong technical expertise, excellent communication skills, and the ability to translate complex security findings into actionable remediation guidance. The successful candidate will play a critical role in maturing the organization&rsquo;s application security posture and ensuring compliance with industry best practices and global security standards.Responsibilities:&middot; Integrate security into all phases of the SDLC by collaborating with development, QA, project, and architecture teams.&middot; Conduct comprehensive application security assessments, including manual and automated code reviews, DAST/SAST analysis, and penetration testing for web, mobile, and API-based applications.&middot; Perform design and architecture reviews, including threat modelling using frameworks such as STRIDE and PASTA.&middot; Identify vulnerabilities and provide remediation guidance aligned with secure coding standards and frameworks such as OWASP Top 10, OWASP ASVS, NIST 800‑115, and CWE.&middot; Develop and maintain application security policies, secure coding guidelines, and best practice references.&middot; Support integration of security tooling into CI/CD pipelines.&middot; Review and improve security processes, focusing on optimization and automation opportunities.&middot; Conduct cloud and infrastructure penetration tests when required, in coordination with infrastructure teams.&middot; Manage and validate vulnerability findings using enterprise vulnerability management systems.&middot; Assist development teams in debugging and resolving security vulnerabilities, ensuring timely remediation.&middot; Participate in incident response activities related to application-layer attacks.&middot; Maintain up‑to‑date knowledge of emerging threats, exploit techniques, and evolving security technologies.&middot; Provide clear technical documentation, reports, and executive summaries of assessment results.&middot; Support internal audits, compliance requirements, and risk assessments related to application security.&middot; Promote secure-by-design principles and contribute to the organization&rsquo;s DevSecOps strategy.&middot; Ensure full compliance with Information Security and Assurance policies, industry standards, and applicable regulatory requirements by embedding governance and controls across the application lifecycle.&middot; Develop, maintain, and enforce application and system hardening baselines aligned with CIS Benchmarks and other security configuration standards.&middot; Participate in 24&times;7 support during critical application security incidents, investigations, and urgent remediation activities as required.&middot; Contribute to security-related initiatives and projects, performing additional duties as assigned to support evolving business and technology needs within the security program.Required Experience &middot; 5-7 years of professional experience in application security, penetration testing, or related security engineering roles.&middot; Demonstrated hands‑on experience in application penetration testing using tools such as Burp Suite, OWASP ZAP, and related exploitation frameworks.&middot; Strong knowledge of OWASP Top 10, OWASP ASVS, OWASP SAMM, and secure SDLC frameworks.&middot; Experience performing threat modelling and reviewing application architecture designs.&middot; Hands‑on expertise with SAST/DAST tools and integrating them into CI/CD workflows.&middot; Working knowledge of vulnerability management process and tools.&middot; Practical experience reviewing code in languages such as JavaScript, TypeScript, Java, or similar.&middot; Good understanding of microservices, REST APIs, authentication/authorization mechanisms, and modern application frameworks.&middot; Basic scripting proficiency (Python, Bash, or PowerShell).&middot; Familiarity with container security, cloud-native security concepts, and DevSecOps practices.&middot; Understanding of networking, TCP/IP fundamentals, and common attack vectors.Education:&middot; BSc/BA in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience.Industry Qualifications: &middot; OSWE, OSCP, OSWA, GPEN, GWAPT, GCPN, or similar security certifications.&middot; Certifications in secure coding, cloud security, or application security standards.&middot; DevSecOps‑related certifications are an advantage.Key Behaviours / Competencies&middot; Strong analytical and problem‑solving skills with attention to detail.&middot; Ability to work independently, prioritize workload, and meet defined deadlines.&middot; Excellent communication skills, with the ability to explain technical vulnerabilities to non‑technical stakeholders.&middot; Demonstrated ability to operate effectively in high‑pressure environments.&middot; A mindset focused on continuous improvement, innovation, and automation.&middot; Strong collaboration and teamwork skills across multidisciplinary teams.&middot; Ability to evaluate applications from both attack and defense perspectives.&middot; Demonstrate a customer‑first mindset by enabling secure, frictionless digital experiences.&middot; Balance security requirements with business needs to support secure innovation.&middot; Provide clear, empathetic, and actionable guidance to internal stakeholders.&middot; Ensure security processes support transparency, agility, and minimal disruption to delivery teams.5. Primary Contactso Information Security Teamo Development Leads / Testing Teamso Project Managerso Security Operations Center (SOC)o Architecture &amp; Governance Teamo Internal and External AuditorsJob Types: Temporary, Contract Contract length: 12 monthsPay: BD1,000.000 - BD1,500.000 per month

Application Security Engineer

Booz Allen Hamilton

<div>Industrial and Program Security Specialist, Junior<div><div>
The Opportunity:</div><div>
Maintain the integrity and compliance of facility security operations. Carry out assigned security tasks and following established policies and procedures in accordance with 32CFR Part 117, National Industrial Security Program Operating Manual (NISPOM), and other relevant government regulations. Complete tasks as assigned and periodically check in with supervisors before moving on to the next step, ensuring all work is documented and approved. Assist the Facility Security Officer (FSO) and Alternate FSO with specific tasks, including preparing Facility Dashboard Reports, incident reports, administrative inquiries, foreign travel reports, local and special briefings, and classified conference documentation. Assist team members with maintaining Open Storage Areas and other secure spaces. Record incoming Visit Authorization Requests, document external visitors to the facility, and maintain security container records. Help with the control and accountability of classified information by performing marking, receipt, wrapping, transmission, inventory, and destruction tasks. Issue courier cards and complete forms such as SAARs and DEERS Enrollment as directed.</div><div> 
You Have:</div><div><ul><li>
Experience as a security specialist supporting the NISPOM and DoD collateral security guidance
</li><li>Ability to work collaboratively with team members and foster a positive work environment</li><li>
Ability to enforce compliance requirements in high pressure environments</li><li>
Ability to interpret security requirements for classified contracts, including DD254s</li><li>
Top Secret clearance</li><li>
HS diploma or GED</li><li>
Center for Development Security Excellence (CDSE) Certification</li></ul></div></div><div><div> 
Nice If You Have:</div><div><ul><li>
Experience handling classified information and secure facility operations
</li><li>Possession of excellent written and verbal communication skills</li><li>
Possession of strong organizational skills and attention to detail for maintaining records and supporting documentation</li><li>
Bachelor&rsquo;s degree</li></ul></div> 
Clearance:<div>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.</div></div>
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $48,000.00 to $98,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Industrial and Program Security Specialist, Junior

NerdWallet

<div>At NerdWallet, we&rsquo;re on a mission to bring clarity to all of life&rsquo;s financial decisions and every great mission needs a team of exceptional Nerds. We&rsquo;ve built an inclusive, flexible, and candid culture where you&rsquo;re empowered to grow, take smart risks, and be unapologetically yourself (cape optional). Whether remote or in-office, we support how you thrive best. We invest in your well-being, development, and ability to make an impact because when one Nerd levels up, we all do.
We are seeking a Security Engineer II to join our Application Security team. The Application Security team enables NerdWallet&rsquo;s mission&mdash;to provide clarity for all of life&rsquo;s financial decisions, by helping ensure the products and services we design and build safeguard our users&rsquo; data and trust.
In this role, you&rsquo;ll partner closely with engineering teams across the company to reduce security risk throughout the software development lifecycle. You&rsquo;ll contribute to initiatives that strengthen NerdWallet&rsquo;s security posture by improving tooling, workflows, and standards that help engineers build secure software while maintaining a great developer experience.
This role is ideal for someone who enjoys solving security challenges collaboratively, building scalable solutions, and helping engineers integrate security practices into their day-to-day work. You&rsquo;ll have the opportunity to grow your application security expertise while contributing meaningfully to a maturing security program.
This role will report to a Business Information Security Officer.<h1 class="jobSectionHeader">
If you were here 6 months ago, here are some things you might have worked on:</h1><ul><li>
Designed and implemented a dashboard for on call activities for the team.</li><li>
Helped triage and respond to security findings and alerts generated by application security tools</li><li>
Completed a penetration test of an external system, and participated in red team campaigns.</li><li>
Collaborated with engineers to remediate vulnerabilities and improve secure coding practices</li><li>
Contributed to automation or tooling that improves visibility into application security risks</li></ul><h1 class="jobSectionHeader">
Where you can make an impact:</h1><ul><li>
Help scale NerdWallet&rsquo;s application security program through automation, tooling, and developer enablement</li><li>
Partner with engineering and product teams to identify and remediate security gaps across multiple systems while balancing business priorities</li><li>
Build tools, processes, and automation that improve security posture visibility for engineers and leadership</li><li>
Review pull requests and provide actionable guidance on secure coding practices</li><li>
Support operational work during security investigations or incidents affecting applications</li><li>
Help integrate security practices into the secure development lifecycle (SDLC) across teams</li></ul><h1 class="jobSectionHeader">
You are:</h1><ul><li>
Familiar with common web application vulnerabilities and mitigation techniques, such as the OWASP Top 10</li><li>
Pragmatic in your approach to reducing risk, balancing security improvements with product and engineering priorities</li><li>
Curious and motivated to continuously grow your application security knowledge and skills</li><li>
Comfortable asking questions, seeking guidance, collaborating, and debating with teammates when working through complex problems</li><li>
Committed to fostering a respectful, blameless, and collaborative engineering culture</li><li>
Interested in helping engineers understand and adopt secure development practices</li></ul><h1 class="jobSectionHeader">
Your experience:</h1><ul><li>
2+ years of experience in application security, software engineering, or a related security role</li><li>
Experience identifying, triaging, and remediating security vulnerabilities in applications</li><li>
Experience working with software deployed in cloud environments, particularly AWS</li><li>
Proficient in Python or another scripting language used for automation</li><li>
Comfortable reading and reviewing JavaScript or similar application code</li><li>
Experience or interest in building automation, tooling, or processes that improve application security workflows</li><li>
Comfortable learning new programming languages, frameworks, or security tools as needed</li></ul><h1 class="jobSectionHeader">
Where:</h1><ul><li>
This role will be remote (based in the U.S.).</li><li>
We believe great work can be done anywhere. No matter where you are based, NerdWallet offers benefits and perks to support the physical, financial, and emotional well being of you and your family.</li></ul><h1 class="jobSectionHeader">
What we offer:</h1>
Work Hard, Stay Balanced (Life&rsquo;s a series of balancing acts, eh?)<ul><li>
Industry-leading medical, dental, and vision health care plans for employees and their dependents</li><li>
Rejuvenation Policy &ndash; Flexible Vacation Time Off + 11 holidays + holiday company shutdown</li><li>
New Parent Leave for employees with a newborn child or a child placed with them for adoption or foster care</li><li>
Mental health support</li><li>
Paid sabbatical after 5 years for Nerds to recharge, gain knowledge, and pursue their interests</li><li>
Health and Dependent Care FSA and HSA Plan with monthly NerdWallet contribution</li><li>
Monthly Wellness Stipend, Cell Phone Stipend, and Wifi Stipend (Only remote Nerds are eligible for the Wifi Stipend)</li><li>
Work from home equipment stipend and co-working space subsidy (Only remote Nerds are eligible for these stipends)</li></ul>
Have Some Fun! (Nerds are fun, too)<ul><li>
Nerd-led group initiatives &ndash; Employee Resource Groups for Parents, Diversity, and Inclusion, Women, LGBTQIA, and other communities</li><li>
Hackathons and team events across all teams and departments</li><li>
Company-wide events like NerdLove (employee appreciation) and our annual Charity Auction</li><li>
Our Nerds love to make an impact by paying it forward &ndash; Take 8 hours of volunteer time off per quarter and donate to your favorite causes with a company match</li></ul>
Plan for your future (And when you retire on your island, remember the little people)<ul><li>
401K with 4% company match</li><li>
Be the first to test and benefit from our new financial products and tools</li><li>
Financial wellness, guidance, and unlimited access to a Certified Financial Planner (CFP) through Northstar</li><li>
Disability and Life Insurance with employer-paid premiums</li></ul>
If you are based in California, we encourage you to read this important information for California residents linked here.
NerdWallet is committed to pursuing and hiring a diverse workforce and is proud to be an equal opportunity employer. We prohibit discrimination and harassment on the basis of any characteristic protected by applicable federal, state, or local law, so all qualified applicants will receive consideration for employment.
NerdWallet will consider qualified applicants with a criminal history pursuant to the California Fair Chance Act and the San Francisco Fair Chance Act, which requires this notice, as well as the Los Angeles Fair Chance Act, which requires this notice.
NerdWallet participates in the Department of Homeland Security U.S. Citizenship and Immigration Services E-Verify program for all US locations. For more information, please see:<ul><li>
E-Verify Participation Poster (English+Spanish/Espa&ntilde;ol)</li><li>
Right to Work Poster (English) / (Spanish/Espa&ntilde;ol)</li></ul>
#LI-Remote
Compensation Range: $127K - $207K</div>

Security Engineer II (Application)

GardaWorld Security Services US

<div>GardaWorld Security Services is Now Hiring a Project Security Specialist!
Ready to suit up as a Project Security Specialist?
What matters most in a role like this is your ability to build meaningful connections. Tell us about how your natural ability to engage with others reassures and inspires confidence.
As an Officer, there is a high focus on customer service since you will be working with people on all shifts, in environments such as office towers, hotels, shopping centers, etc.
What&rsquo;s in it for you:<ul><li>
Site Location: Glen Allen</li><li>
Set schedule: Full-time, Monday through Friday, 1st shift (9:00am-5:00pm)</li><li>
Competitive hourly wage of (DailyPay is available for GardaWorld employees!)</li><li>
A comprehensive benefits package including medical, dental, and vision insurance plans, a 401(k) retirement savings plan with employer matching contributions, paid time off (PTO) policy, paid holidays, disability coverage, and life insurance options</li><li>
Career growth opportunities at GardaWorld</li><li>
Uniform provided at no cost</li></ul>
Responsibilities<ul><li>
Monitor and maintain the card access system while responding accordingly and professionally in a timely manner.</li><li>
Triage service tickets and take appropriate action.</li><li>
Assist with activities related to the access control system conversion project.</li><li>
Process access control and service request tickets, ensure required approvals are obtained and take appropriate action.</li><li>
Create/update access control records, apply appropriate access levels and issue physical access control credentials.</li><li>
Submit service tickets to third-party security systems integrator; manage ticket life-cycle to conclusion.</li><li>
Solicit pertinent information from callers and relay complex facts and details accurately and concisely to the appropriate personnel.</li><li>
Prepare, complete, and project related reports to include stats/metrics and work orders.</li><li>
Monitor and maintain all forms of communication to include email, phones, cell phones, and/or personal contact with internal and external customers while responding accordingly and professionally in a timely manner.</li><li>
Perform other duties as assigned by Corporate Security management.</li></ul>
Qualifications<ul><li>
Be authorized to work in the U.S.</li><li>
Be able to provide documentation of High School Diploma or GED</li><li>
Must have an active DCJS License</li></ul>
Knowledge &amp; Skills<ul><li>
Strong teamwork and communication skills. Must be flexible/adaptable to a constantly changing environment.</li><li>
Excellent written and verbal communication skills</li><li>
Ability to exercise a high degree of diplomacy and collaboration.</li><li>
Intermediate to advanced level keyboard and computer skills.</li><li>
Ability to coordinate multiple assignments, actions, and direct others to locations and tasks.</li><li>
Attention to detail.</li><li>
Ability to work without close supervision.</li><li>
Ability to keep privileged information confidential.</li><li>
Knowledge of Microsoft applications such as Outlook, Word and Excel</li></ul>
In the United States, GardaWorld Security remains the only guarding security company to be Certified by Great Place to Work. Apply today &ndash; this could be more than a job! 26% of our corporate employees started as frontline workers.
If you&rsquo;re ambitious with an entrepreneurial spirit &ndash; someone who wants to be a GardaWorld Ambassador &ndash; a promising career awaits you!
GardaWorld Security is a global champion in sophisticated and tailored security solutions, employing and training highly skilled and dedicated professionals across the globe.
Not the job for you? Make sure to check out all our jobs! We also have tactical, surveillance, and even casual roles available.
It is the policy of GardaWorld Security Services to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, veteran status, or disability in accordance with applicable federal laws. In addition, GardaWorld Security Services complies with applicable state and local laws governing nondiscrimination in employment. This policy applies to all terms and conditions of employment including, but not limited to hiring, placement, assignment, promotion, termination, layoffs, recalls, transfers, leaves of absence, compensation, and training. It is also the policy of GardaWorld Security Services not to honor requests that employees be assigned on the basis of sex or any other classification protected by law, unless such request is based on a bona fide occupational qualification for that assignment. 
 
Business License: 11-6404</div>

Project Security Specialist I

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
JOB PURPOSE: 
To deploy, operate, ensure and maintain the appropriate application and software security solutions, controls and tools within the overall bank&rsquo;s approved security architecture framework and according to bank&rsquo;s information security policies, procedures and guidelines.
Description 
1.Monitor, Define, Implement and operate the enterprise applications security platforms, Public Key Infrastructure (PKI), and assist in fixing the vulnerabilities / gaps identified from security scanning tools and services in order to provide the required assurance that corporate applications and published services are up and running in a secured way according to bank&rsquo;s information security policies. 
2.Run static code scanning tools and perform manual code inspection in alignment with IT Development team, while providing Information Security Compliance team with a clean report to provide assurance that secure code practices are being followed. 
3.Provide the required level of support for all managed systems and applications from application security perspective, acting as a focal point between Information Security Compliance team and the remaining IT stakeholders for any required security assessments. in order to maintain business operations and security controls according to approved service level agreement and information security standards. 
4.Participate in dynamic code scanning, application security design reviews and penetration testing of internal web applications and external partner applications to mitigate the identified vulnerabilities and security defects. 
5.Supports the implementation and enforcement of technical security measures on the application level according to policies, standards, and patterns of Information Security, in order to be fully aligned with corporate approved Secure Software Development Lifecycle. 
6.Participate in security architecture reviews for different applications as part of the BRD, Projects and SDLC process lifecycle to ensure effective security controls over enterprise applications as well as mitigation of reported vulnerabilities as security defects. 
7.Serves as a Subject Matter Expert (SME) in web application security for enterprise projects during development phases to provide security consulting and recommendations and assist in implementing and fine-tuning the different security controls in alignment with the business applications&rsquo; functionalities such as the Web Application Firewall (WAF) and the Next Generation Firewalls&rsquo; (NGFW) policies and access lists. 
8.Perform security functional testing as needed and validate pen-test findings, in order to provide information security by the required levels of assurance that identified security gaps and vulnerabilities have been mitigated as planned. 
9.Ensure proper configuration and functionality of the managed solutions and coordinate with support vendors for resolving issues impacting solutions&rsquo; availability, in order to keep solution with full compliance of current environment architectural and incident response requirements. 
10.Ensure that all implemented projects meet application security best practice, and guidelines, including but not limited to integration of third party security products within the current infrastructure, in order to ensure solution proper implementation and operation. 
11.Produce regular monthly KPIs, application security reports and dashboards for incidents identified on managed platforms, actions taken and mitigations applied for further reporting in order to be represented to the respective stakeholders/committees as needed. 
12.Support and Assist security related infrastructure/information Security teams in the estimation of implementation project time and materials, testing and evaluation of new technologies and security controls, in order to effectively optimize organization resources. 
13.Provide project management support by facilitating demonstrations of vendor partner products, reviewing and co-authoring statements of work, evaluation support for product demos, in order to ensure effective engagement towards business objectives. 
14.Ensure that application security tools and technologies are deployed in the current environment in line with architectural requirements with the appropriate levels of application security controls and systems monitoring at all levels, in order to ensure effective controls according to business/compliance/regulation requirements. 
Policies, Processes and Procedures 
15.Follow all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner. 
Day-to-day operations 
16.Follow the day-to-day operations related to own jobs in the IT Security, Control &amp; Quality Assurance department to ensure continuity of work. 
Compliance 
17.Comply with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks. 

</div><div></div><div>Qualifications<div></div> 
QUALIFICATIONS, EXPERIENCE, &amp; SKILLS 
 Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent. 
 Senior Engineer: Minimum of 6 &ndash; 8 years of experience in IT Security and related disciplines. 
 Experience in use of various commercial and open source penetration testing tools and methodologies and performing penetration testing of web applications and operating systems. 
 Experience in identifying and remediating common web application vulnerabilities such as OWASP Top 10. 
 Familiarity with APT attack and kill chains. 
 Experience with enterprise security architecture and software such as Web Applications Firewalls, Next Generation Firewalls, email sandboxing, etc 
 Experience in configuring and implementing technical security solutions, application security platforms, sandboxing, and similar technologies. 
 Good written and verbal communication skills 
 Self-motivated, Problem Solving Skills, Detail oriented 
 Proven analytical and problem-solving abilities 
 Ability to effectively prioritize and execute tasks in a high-pressure environment 
 Experience working in a team-oriented, collaborative environment 
 Good command of English language. 
Recommended Certifications 
 Microsoft Certified Systems Administrator: Security 
 GIAC Information Security Fundamentals 
 CCNP Security<div> 
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 1</div><div>
Work Locations: B219 - Financial District, Smart Village, Cairo - Alex Desert Road</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

APPLICATION SECURITY ENGINEER

Search 10000+ Application security specialist jobs near you this March. New roles added regularly across leading industries. Apply today.