Cybersecurity Offensive specialist Senior

Il y a 3 jours

Luxembourg Atos Temps plein

Gratuit avec email ou Google

Enregistrez cette offre et organisez votre recherche

Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.

Enregistrer le travail Enregistrer et créer une alerte

Gratuit avec email ou Google

En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.

CONTEXT / INTRODUCTION The Security Unit is responsible for delivering value-added security assurance services to proactively detect and appropriately respond to potential security vulnerabilities in either applications or infrastructure operated by the European Commission. The Application Security Testing service is, among the services offered by the Security Assurance sector, the service that ensures early detection of potential vulnerabilities in the applications developed by the European Commission before they go live, by running static analysis on the source code, and dynamic analysis on the running application in a non
- production environment for more than 10 years. This profile will provide expertise in Mobile / Web Application Pentesting / Secure Code Review and by enhancing Application Security Testing Capability within the Security Unit. DESCRIPTION OF THE TASKS The external service provider will perform the following tasks:
• Preparation of custom scripts, integrations and automations.
• Drafting of playbooks, and technical documentation.
• Execution of Application Security Tests from start to finish, including: o Initial Coordination with the customer and Setup of the testing environment. o Execution of Penetration Testing on deployed Web and / or mobile applications. o Execution of Secure Code Review on source code of Web and / or mobile applications. o Drafting of the Security Testing report. o Presentation of the results to the customer, both at technical and management level.
• Interaction with relevant EC teams, and external stakeholders to ensure clear communication, alignment, and efficient collaboration. SPECIFIC KNOWLEDGE, SKILLS AND EXPERTISE The following specific knowledge, skills and expertise are required for the performance of the above listed tasks:
• Very good knowledge and practical hands-on experience in OWASP Testing Methodologies
• Strong experience in executing Web/Mobile Application secure code review and
• Web/Mobile Application pentesting
• Ability to cope with fast-evolving technologies in Web Application Security
• Very good communication skills with both technical and non-technical audiences, ensuring accurate, business-relevant translation of technical findings.
• Strong analysis and problem-solving skills
• Capability to write clear, structured technical documents (application security testing reports).
• Ability to participate in and lead technical meetings, ensuring objectives are achieved.
• Certification in Web Application Pentesting and / or Secure Code Review from a leading educational institute in the cybersecurity field.
• Proven track record in Java software development. The following skills and experience will be considered as strong assets:
• Strong expertise in Corporate Application Security Testing tools: Fortify Software Security Centre, Sonatype LifeCycle, Portswigger Burp.
• Demonstrated ability to develop software in Java/JSP, ColdFusion, PHP, JavaScript/HTML

Cybersecurity Offensive specialist Senior

Enregistrez cette offre et organisez votre recherche

Emplois similaires à Luxembourg

Villes principales

Amériques

Europe

Asie / Océanie

Afrique

Cybersecurity Offensive specialist Senior

Enregistrez cette offre et organisez votre recherche

Emplois similaires à Luxembourg

Villes principales