Education Qualification: Bachelor's degree in Computer Science, Information Security, or related field. Advanced certifications (CISSP, CISM, CEH) preferred.
Position Description: We are seeking a passionate and experienced Security Expert to join our Hotscan team. The ideal candidate will have a strong background in information security practices, risk management, and security governance. This role requires the ability to design, implement, and monitor security practices that align with industry standards and organizational goals.
Your future duties and responsibilities:
Responsibilities:
- Monitor the security quality of the HS360 program.
- Develop security threat models to proactively assess potential risks.
- Monitor vulnerabilities and track security findings across the industry.
- Prioritize findings for project management and governance alignment.
- Identify risk issues, build business cases for remediation plans, and align with the product roadmap.
- Track progress and ensure timely resolution of identified security issues.
- Define and document secure coding practices for development teams.
- Prepare and lead security training sessions for developers and stakeholders.
- Provide advice on security toolsets and measures to strengthen the program's security posture.
Must-Have Skills:
- Strong knowledge of information security principles and practices.
- Hands-on experience with vulnerability management, risk analysis, and threat modeling.
- Excellent understanding of secure coding practices.
- Robust communication and presentation skills for conducting security training.
- Experience in preparing business cases for remediation and aligning with governance frameworks.
Required qualifications to be successful in this role:
Good-to-Have Skills:
- Certifications such as CISSP, CISM, CEH, or equivalent.
- Experience working with financial products or AML systems.
- Familiarity with cloud security practices (AWS/Azure/GCP).
- Knowledge of security toolsets such as SIEM, vulnerability scanners, and penetration testing frameworks.