Application Security Engineer for Bahrain

[sreejith mr]

VAM SYSTEMS is a Business Consulting, IT Solutions and Services company with operations in UAE, Qatar, Bahrain, USA, Australia, Singapore & India.

VAM SYSTEMS is currently looking for Application Security Engineer for our Bahrain operations with the following skill set and terms and conditions:

Skillset

 

·         Minimum of 5 years work experience in application development or Information security.

·         Minimum of 4 years work experience in application security.

·         Minimum of 3 years of development experience in two of the following: Java, PHP and ASP.NET

·         Demonstrated experience in performing assessments, creation and delivery of quality deliverables that identify vulnerabilities, risks, ratings and remediation instructions,

·         Demonstrated experience in manual security code reviews.

·         Demonstrated experience in automated security code reviews.

·         Demonstrated expertise and technical knowledge in application security controls, authentication methodologies, LDAP, SSO, role based security & cryptography.

·         Demonstrated expertise in implementing and integrating security best practices in an organization’s software development lifecycle(SDLC)

·         Strong knowledge of OWASP.

·         Knowledge of SANS tools and methodologies.

·         Understanding of common web technologies and protocols including .NET, PHP, HTTP(S), SAML, SOA, SOAP, Web services. And others (please list others).

·         Experience in Java frameworks, including play and JSF/JSP technologies.

·         Experience with variety of application security testing toolsets and methodologies (Please list).

·         Experience with SQL.

·         Able to compile high-quality reports detailing the findings of an Application review including the findings, remediation’s, and references.

Education 

A Bachelor’s degree in computer science, mathematics, or a related field.

Carries one or more of the following certifications:

·         GIAC Certified Web Application Penetration Tester (GWAPT)

·         GIAC Certified Web Application Defender (GWEB)

·         GIAC Certified Secure Software Programmer- .NET (GSSP-.NET)

·         GIAC Certified Secure Software Programmer-Java  (GSSP-JAVA)

·         Mile2.com- Certified Secure Web Application Engineer (CSWAE)

·         Mile2.com- Certified Secure Code Engineer (CSCE)

·         (ISC)2 – Certified Secure Software Lifecycle Professional (CSSLP)

Responsibilities                                                                                            

·         Ensure that applications meet the highest standards of security.

·         Review the applications source code manually as well as using tools.

·         Compile reports and return feedback to the application owners with the found vulnerabilities and remediation.

·         Communicate with application owners and participate in meetings.

·         Create procedures and frameworks to formalize the process of the Application code review.

·         Working closely with security team members in security reviews, vulnerability assessments, incident response, and forensics in relation to application security.

·         Create and maintain a training program for Application code review.

·         If the engineer knows only two of the following languages ASP. NET, PHP, and Java the engineer must be willing to learn the third.

 Terms and conditions:

Joining time frame:   1 month

The selected candidates shall join VAM SYSTEMS – Bahrain and shall be deputed to one of the leading Organizations in Bahrain.

Should you be interested in this opportunity, please send your latest resume in MS Word format at the earliest to sreejit...@vamsystems.com or call us +91 471 2766011 or +91 476 2681150 .