استخدام Security Engineer
شرح موقعیت شغلی
Security Engineer
About First Source Arya Solutions
First Source Arya Solutions is a software development company focusing on developing state-of-the-art solutions for the global financial industry. We help our international clients grow their audience with customer-centric products and services.
First Source Arya Solutions is a work environment which is designed to foster personal and professional growth. A career at our company is an opportunity to make an impact in a fast-growing organisation that is at the forefront of FinTech advancements.
About the role
We’re looking for a Security Engineer to join our Information Security team, which makes sure that threats and potential security risks are kept at bay to protect our operations. As a Security Engineer, you will be responsible for testing and screening software to detect vulnerabilities and security breaches. This job challenges you to develop and establish security practices, create new ways to solve security issues, keep abreast with the most recent digital threats, and help to raise security awareness throughout the organisation.
Responsibilities
● Test out the strength of our company’s security systems and identify any potential weaknesses.
● Formulate strategies and offer solutions to ensure continued security improvements.
● Develop a set of standards that are intended to protect the organisation against any vulnerabilities.
● Take charge of creating and using open-source approaches, such as SIEM and IDS, monitoring automatic security scripts, and handling the company bug bounty programme.
● Monitor and audit cloud platform systems and be up-to-date of any service changes.
● Expose company software to routine penetration testing and use the findings to augment the protection of our systems, applications, and databases.
● Raise awareness about security and share preventive measures and best practices with everyone in the organisation.
Minimum requirements
● Hands-on experience with thorough validation testing and fuzzing
● Practical experience in identifying software vulnerabilities, monitoring security, and detecting breachings
● Operational expertise with AWS, including analytics, log review, and security services
● Professional experience in white-box web app penetration testing
● Up-to-the-minute information on the top 10 OWASP security risks and encryption techniques
● Strong skill in appraising the effects of API incompatibilities and bugs on security
● Advanced knowledge of standard security testing software such as Burp Suite and Metasploit
● Working experience in developing scripts and tools for vulnerability scanning
● Thorough understanding of cyber-attacks, such as injection (like SQL and form parameter), timing, DoS, side-channel, DNS cache poisoning, and buffer overflows, and a firm grasp on mitigation strategies
● Thorough understanding of conceptual networking frameworks such as the OSI and TCP/IP models
● Awareness of best practices and developments in cyber-security
● Excellent spoken and written English communication skills
Preferred qualifications and experience
● Security+, OSCP, CISSP, eCCPT, or any GIAC certification
● Working experience with one or more bug bounty programmes, for example, Bugcrowd, HackerOne, and Cobalt
● Good knowledge of best practices for cloud workload security
● Solid understanding of cloud computing security risks
● Familiarity with disaster recovery and security recovery procedures
Perks and benefits
● Growth-inducing challenges
● Productive work atmosphere
● Cooperation, support, and empowerment
● Career progression opportunities
● Market-based salary
● Annual performance bonus
● Health benefits
Location
Negar Tower, Tehran
مهارتهای مورد نیاز
- OWASP
- DNS
- tcp/ip
- cissp
حداقل سابقه کار
- مهم نیست
جنسیت
- مهم نیست
وضعیت نظام وظیفه
- معافیت دائم پایان خدمت