NST Cyber Hiring for Penetration Tester at Dubai Full Time

As a Penetration Tester you will have a unique opportunity to Design, Engineer & Embed practical & balanced cyber / information security principles/patterns/controls into all products and platforms at NST Cyber. In this role you will be working with an energetic team of cybersecurity SMEs, Specialists and other stakeholders to conduct security assessments, gap analysis, provide remediation to the relevant squads / stakeholders.
As a Security Assessor your responsibilities include but are not limited to the following:

• Encourage ‘Shift Left’ Mindset – Proactively embed security requirements, by influencing implementation of security & privacy patterns from the start of the development cycle
• Implement via Influence – Influence stakeholders such as Product Owners, Solution Architects, Developers, Testers, Engineers & others to include security patterns into features, epics and stories in order to build secure, innovative & superior digital products for customers and employees
• Assessments – Act as a DecSecOps engineer to Perform security assessment, gap analysis to provide appropriate remediations to the teams for implementing the fixes.

Requirements: –

• Bachelor’s degree in a computer-related field
• Must have minimum 4 years of experience in an information security function
• Minimum 3 years of experience, as a Security Engineer especially in Cloud Native environments
• Deep foundational knowledge of Containerized environment and Streaming Platforms
• Experience working in a DevOps environment with knowledge of Continuous Integration, Containers, DAST/SAST tools and building Evil Stories (Technical)
• Experience for Securing following Components:
  • Containers
  • Docker
  • Kubernetes
  • Jenkins
  • Github
  • Openshift
  • With good knowledge about microservice architecture and pipeline driven security
• Technical Requirements | Application Security Assessment Skillset
  • Container Security
  • Docker Review / Image review
  • Kubernetes Security Review
  • Open-source Libraries review
  • Application Security
  • Security Code Review
  • Container Review
  • Infrastructure Review
  • WAF rules review
• Superlative written and verbal communication skills
• Ability to collaborate with multiple stakeholders and manage their expectations from a security perspective
• Strong understanding of Risk Management Framework and security controls implementation from an implementer standpoint
• Has strong decision making, planning and time management skills.
• Can work independently.
• Has a positive and constructive attitude.

NST Cyber partners with global banks and Forbes 2000 companies across 4 continents to deliver independent audits and enterprise security assessments. Our core expertise lies in securing complex, scalable modern-day applications that extensively leverage cloud services and technologies.

With a combination of intelligence-driven active assessments, policy, and control validation, our team ensures your security and success with a best-in-class customer experience.