Application Securityand mobile IOT exp
About the positionResponsibilities• Conduct security assessments for products and solutions developed by the client Consumer Group. • Collaborate with cross-functional teams to create, define, and implement security controls and tooling. • Evaluate security postures and recommend improvements for Mobile Platforms, Web, and Embedded applications. • Build threat models, conduct design reviews, and document mitigation techniques. • Manage multiple projects with a degree of impact and complexity to support internal business unit security requirements.• Participate in architectural discussions to ensure success in building or migrating cloud infrastructures and applications. • Evaluate new threats and attacks to identify impacts on business and develop appropriate security controls. • Apply cryptographic primitives and protocols for authentication, authorization, and data protection. • Recommend and manage transmission protection requirements for all environments. • Implement security modules, tools, and code snippets as needed. • Develop architectural documentation, white papers, and best practices for security.• Train and coach engineering teams on integrating CI/CD pipeline tools and vulnerability assessment tools. Requirements• Bachelor's degree in Computer Science or related fields. • Seven or more years of relevant work experience. • Strong knowledge of cyber security principles, standards, and control frameworks. • Experience performing security assessments and control gap analyses for cloud-based and mobile-embedded platforms. • Familiarity with OWASP Top 10 vulnerabilities and Cryptographic Algorithms (PKI, X.509, transport layer security, OAuth, SAML).• Ability to communicate and resolve complex security or operational issues. • Engineering or development experience in programming languages such as Java, JavaScript, Python, Scala, C++/C, Swift. Nice-to-haves• Master's degree in Computer Science or equivalent engineering experience. • Direct experience with implementing Security Services and tools in AWS (GuardDuty, Macie, CloudTrail, etc.). • Experience with storage technologies (S3), Networking (VPC, IDS/IPS, firewalls). • Experience with configuration tools (AWS Config, AWS Inspector).• Familiarity with vulnerabilities tools (Prisma Cloud, Crowdstrike). • Container Security experience with Docker, ECS, Kubernetes. • Experience with configuration languages/IaaC (JSON, CloudFormation, Terraform). • Understanding of various types of Exploits, Threat Modeling, and Attack surfaces. • One or more cyber security certifications (AWS Certified Solutions Architect, AWS Certified Security, CISSP, etc.). Benefits• Flexible work from home options available. Apply tot his job