19 oct
GSB
Bogotá
Empresa GSB Descripción de la Empresa La visión de GSB nos compromete a ofrecer a nuestros clientes servicios de primera mano, motivándonos a ampliar nuestra presencia global constantemente. Departamento Bogotá DC Localidad Bogotá - Remoto Tipo de Contratación Tiempo Completo Descripción de la Plaza Main Activities / Responsibilities: 1. Generation of threat modeling analysis, security requirements and abuse cases for all developments carried out in ADC.
2. Analyze changes to existing software looking for security risks that can be implemented in the coding process. 3. Identify vulnerabilities in the source code and in the runtime application. 4.
Determine and advise on the recommended security controls required to remediate findings and issues in an efficient and concise manner.
5. Generate awareness campaigns to all stakeholders of the software process. 6. Help developers to use secure coding practices, as well as resolve specific doubts about vulnerabilities identified in the different testing scenarios. 7. Align security solutions to Holcim methodologies and standards.
8. Design, implement, and support the security model for general security solutions. 9. Develop and drive the implementation of security best practices and standards. 10. Review requests for new systems or changes to existing systems and evaluate the impact to security.
11. Conduct pre-audits on security issues of concern, work with the user community on remediation; conduct spot checks of user security to ensure compliance. 12. Provide technical Support for security issues related to in-scope applications, infrastructure as code and cloud services. 13.
Provide support to other colleagues in terms of technical/functional expertise with the assigned business processes.
14. Expert in Vulnerability Management tools like Qualys or Nessus. Qualifications: 1. Bachelor’s degree in Computer Science, Engineering, or related discipline with an IT focus.
2. Certifications: CISSP, CISM, CISA, CRISC ITIL, CMMI, ISO 27001, GSEC, CSSLP. 3. Ethical Hacking certifications desired. 4. Secure coding certifications desired.
Required Experience: 1. At least 4 years of experience in IT Security and development, delivering applications with a secure focus, assessments and audits. 2. Experience in fullstack development, object-oriented programming, microservices oriented architecture, with knowledge in agile methodologies and DevOps model.
Desired Experience: 1. Experience on secure development and ethical hacking.
2. Experience with vulnerabilities and fixes for different languages (C, C#, Java, Javascript).
Soft skills: 1. Experience coordinating and completing multiple tasks within established and changing deadlines. 2. Excellent organizational, analytical, and independent problem solving skills.
3. Demonstrated excellent oral and written communication skills necessary to interact effectively with colleagues and users of varying technological skill levels. 4. Strong customer / end-user / client service orientation. 5. Thrives working in a highly collaborative and team environment.
6. Highly self-motivated and directed. 7. Ability to provide 24/7 support to respond to critical incidents or business impacting project deliverables. 8.
Keen attention to detail.
9. Capability for problem solving, decision making, sound judgment, assertiveness. 10. Ability to deal with difficult situations, unclear priorities and blocking stakeholders. 11. Ability to work decisively under heavy workload considering the criticality, urgency and extended work hours required to ensure availability of the service in accordance with service level commitments.
12. Ability to manage multi-cultural and multi-located teams. Leadership skills: 1. Lead by example on values and culture.
2. A natural leader whose personality and communication skills instill a sense of credibility and trust. 3. Able to coherently explain the proposed design and gain stakeholder buy-in to the proposed solution. 4.
Cost conscious and keeps a big picture perspective.
Required skills: 1. Authentication and Access Control Tools, Management and Administration. 2. Application Security Architecture & Cloud Computing Concepts.
3. Change & Security Configuration Audit and Control. 4. Encryption Processes, Management and Administration. 5. Experience in static and dynamic security testing (code review, vulnerability analysis, Ethical Hacking).
6. Knowledge in offensive security methodologies (OWASP, MASVS, OPENSAMM, CKC, etc). Knowledge in tools such as OwaspZap, Burpsuite, Nessus, Service Manager, Git, Fortify, Codacy, Sonarqube. Desired skills:
1. Knowledge in AWS cloud security. Languages: 1. English desired (written & spoken).
2. Spanish required (written & spoken). Benefits: 1. Law benefits.
2. Courses and certifications. Mínimo Nivel Académico Requerido: Universidad Completa Mínimo Nivel de Inglés Requerido: Avanzado #J-18808-Ljbffr
▶️ Applications Security Specialist (Inicio Inmediato)
🖊️ GSB
📍 Bogotá