Product Security & Compliance – Associate Engineer

Job description

Product Security & Compliance – Associate Engineer

Ensuring the security of in-house developed software and its compliance with industry standards, while validating non-functional scenarios and process adherence to established benchmarks and standards.

Key Responsibilities
• Ensure Software Product Security and Compliance: Assessment of security and compliance of software products throughout their lifecycle.
• Conduct Information Security and Vulnerability Assessments: Perform assessments and penetration testing on in-house developed software and open source software libraries to identify and address security vulnerabilities.
• Execute Risk-Based Testing (RBT) and Non-Functional Testing: Apply risk-based approaches and conduct non-functional testing of applications to ensure their robustness and performance.
• Validate Industry Standards Compliance: Assess developed software and its lifecycle against relevant industry standards to ensure adherence.
• Evaluate Process Adherence: Verify that the software development lifecycle processes follow company-defined standards and procedures.
• Validate Against International Certification Standards: Ensure software products meet internationally recognized certification standards for quality and security.
• Generate Assessment Reports: Produce detailed reports on assessment findings, vulnerabilities, and compliance status. Communicate with Customers and Internal Teams: Liaise with customers and the internal development team to identify resolutions and address any issues identified during assessments.

Qualifications & Experience
• Degree in IT/MIS: Bachelor’s degree in Information Technology or Management Information Systems from a recognized university.
• Knowledge of Ethical Hacking and Information Security: Strong understanding of or hands-on experience with ethical hacking and information security practices.
• Experience in Application Testing and QA: At least 1 year of cumulative experience in application testing and software quality assurance.
• Interest in Penetration Testing and QA: Demonstrated enthusiasm for performing both penetration testing/vulnerability assessments and quality assurance tasks.
• Experience in Finance/Banking/Information Security: Prior experience in QA/testing within the finance, banking, or information security domains is advantageous.
• Excellent Communication Skills: Strong proficiency in English, both written and verbal, with precise literacy skills.
• Knowledge of Performance Testing and Test Automation: Familiarity with JMeter for performance testing and test automation using Selenium/Cucumber is a plus.
• Candidate should be willing to travel abroad at any given time for any required country.
• Minimum 1 year experience in a similar capacity.