Senior Security Engineer Reference number: 2484

Job description

We are currently seeking a highly skilled Senior Security Engineer on behalf of our client.
As a Senior Security Engineer, you will play a crucial role in ensuring the security and integrity of web applications and mobile applications (iOS).
You will be responsible for conducting manual penetration testing, code reviews, and implementing robust security measures throughout the CI/CD pipeline.
Additionally, you will collaborate with stakeholders to coordinate vulnerability management and provide technical support to internal auditing teams.

What you'll do

• Responsibilities:
  Perform manual penetration testing and code review of web applications and mobile applications (iOS).
  Set up, maintain, and enhance SAST and DAST tooling in the CI/CD pipeline, specifically using Micro Focus Fortify & Micro Focus Fortify WebInspect.
  Analyze results from automated SAST and DAST scanning, utilizing Micro Focus Software Security Center.
  Provide detailed mitigations for identified security vulnerabilities.
  Coordinate vulnerability management and planning with

Required skills

• Requirements:
  Basic experience in application security testing.
  eWPT certification, eWPTX (or equivalent) is a plus.
  Strong communication and reporting skills.
  Knowledge of application security testing within a devops/devsecops environment.
  Familiarity with network security.
  Proficiency in penetration testing methodologies (OWASP Top 10, OWASP WSTG, etc.).
  Experience with penetration testing tools such as Burp Suite Pro, SQLMap, etc.
  Expertise in manual source code analysis (Java, Python