Application Security & Risk Assessment (Information Security Analyst)

Job Description
Position: Information Security Analyst (Application Security & Risk Assessment)
Functional Reporting: Global Head of IT Security

Principle Responsibilities:

• The analyst will perform risk assessment and threat modeling of systems and applications on premises and in the cloud.
• Provide security review in the SDLC.
• Create risk assessment reports
• Create diagrams and solution proposals
• Review third party applications and vendors
• Recommend security controls for application teams.

Qualifications

• 3+ years working in the information security field.
• 2+ years working in the application security and/or risk assessment field.
• 2+ years working in finance area is an advantage.
• Excellent knowledge of network and TCP/IPV4
• Excellent knowledge of encryption
• Working knowledge with WebSocket,  HTTP/2 and HTML5
• Practical and theoretical knoledge working with HTTP protocol, web servers and load balancers.
• Ability to explain and recommend solutions for all OWASP top 10 vulnerabilities.
• Practical knowledge on Cryptography.
• Web Application Firewalls from a security testing standpoint.