12 Aug
|
Esyasoft Technologies
|
Joka
12 Aug
Esyasoft Technologies
Joka
The Security Consultant is responsible for assessing, designing,
implementing, and maintaining information security controls to protect
organizational systems, networks, and data. The role ensures compliance with
security standards, manages cyber risks, and supports secure digital
transformation initiatives.
Key Responsibility:
1. Security Assessment & Risk Management
- Architect
enterprise-wide Application Security (AppSec) programs across complex,
distributed enterprise environments—embedding SAST, DAST, and SCA into
CI/CD pipelines to enable secure-by-design architecture and reduce
vulnerabilities.
- Define
secure architecture patterns and guardrails, integrating AppSec controls
into DevSecOps pipelines to standardize risk management across
distributed engineering teams.
- Collaborated
with Customer Security teams to embed security architecture principles
to produce secure project setting.
- Experience in Application Security governance frameworks,
aligning with NIST, ISO 27001, and PCI DSS to achieve compliance posture
and audit readiness
- Conduct
security risk assessments,
vulnerability assessments, and threat
modeling across applications, infrastructure, and networks.
- Identify
security gaps and provide risk-based mitigation recommendations.
- Perform
periodic security posture reviews and maturity assessments.
2. Security Architecture & Solution Design
- Design
and review secure architecture for applications, cloud, and on-premise
systems.
- Ensure
security-by-design principles are embedded in system development and
integration.
- Review
technical designs to ensure alignment with security standards and best
practices.
3. Application & Infrastructure Security
- Support
and define application security testing (SAST, DAST, API security
testing).
- Support
secure coding practices and review source code for vulnerabilities.
- Assess
infrastructure security including servers, databases, networks, and
endpoints.
4. Cloud & DevSecOps Security
- Implement
an
📌 Senior Lead Engineer (Joka)
🏢 Esyasoft Technologies
📍 Joka