Very Urgent Required : Application Security Engineer for Bahrain

[vam]

VAM SYSTEMS is a Business Consulting, IT Solutions and Services
company with operations in UAE, Qatar, Bahrain, USA, Australia,
Singapore & India.
VAM SYSTEMS is currently looking for Application Security Engineer for
our Bahrain operations with the following skill set and terms and
conditions:
Skill Set required:
1. Minimum of 5years work experience in application development or
Information security.
2. Minimum of 4 years work experience in application security.
3. Minimum of 3 years of development experience in two of the
following: Java, PHP and ASP.NET
4. Demonstrated experience in performing assessments, creation and
delivery of quality deliverables that identify vulnerabilities, risks,
ratings and remediation instructions,
5. Demonstrated experience experience in manual security code reviews.
6. Demonstrated experience in automated security code reviews.
7. Demonstrated expertise and technical knowledge in application
security controls, authentication methodologies, LDAP, SSO, role based
security & cryptography.
8. Demonstrated expertise in implementing and integrating security
best practices in an organization’s software development
lifecycle(SDLC)
9. Strong knowledge of OWASP.
10. Knowledge of SANS tools and methodologies.
11. Understanding of common web technologies and protocols
Including .NET, PHP, HTTP(S), SAML, SOA, SOAP, Web services. And
others (please list others).
12. Experience in Java frameworks, including play and JSF/JSP
technologies.
13. Experience with variety of application security testing toolsets
and methodologies (Please list).
14. Experience with SQL.
15. Able to compile high-quality reports detailing the findings of an
Application review including the findings, remediation’s, and
references.
Education
A Bachelor’s degree in computer science, mathematics, or a related
field.

Carries one or more of the following certifications:
a. GIAC Certified Web Application Penetration Tester (GWAPT)
b. GIAC Certified Web Application Defender (GWEB)
c. GIAC Certified Secure Software Programmer- .NET (GSSP-.NET)
d. GIAC Certified Secure Software Programmer-Java (GSSP-JAVA)
e. Mile2.com- Certified Secure Web Application Engineer (CSWAE)
f. Mile2.com- Certified Secure Code Engineer (CSCE)
g. (ISC)2 – Certified Secure Software Lifecycle Professional (CSSLP)


Responsibilities

1. Ensure that applications meet the highest standards of security.
2. Review the applications source code manually as well as using
tools.
3. Compile reports and return feedback to the application owners with
the found
vulnerabilities and remediation.
4. Communicate with application owners and participate in meetings.
5. Create procedures and frameworks to formalize the process of the
Application code review.
6. Working closely with security team members in security reviews,
vulnerability assessments, incident response, and forensics in
relation to application security.
7. Create and maintain a training program for Application code review.
8. If the engineer knows only two of the following languages ASP. NET,
PHP, and Java the engineer must be willing to learn the third.

Terms and conditions:
Joining time frame: 2 weeks (maximum 1 month)
The selected candidates shall join VAM SYSTEMS – Bahrain and shall be
deputed to one of the leading Organizations in Bahrain.
Should you be interested in this opportunity, please send your latest
resume in MS Word format at the earliest at
ambili....@vamsystems.com or call us +91 476 2681150.