Description

关于我们的客户

An international bank

职责描述
• Conduct threat modeling assessments to identify and analyze potential security threats and vulnerabilities across our systems and applications.
• Perform internal penetration testing to identify weaknesses in our infrastructure, applications, and security controls.
• Collaborate with development and operations teams to provide recommendations and guidance on security good practices and controls based on threat modeling and penetration testing findings.
• Assist in the implementation and maintenance of security controls, including firewalls, intrusion detection/prevention systems, and endpoint protection.
• Develop and maintain incident response plans and procedures to ensure a timely and effective response to security incidents.
• Monitor security events and alerts, investigate potential security incidents, and coordinate incident response activities.
• Conduct post-incident analysis and root cause investigations to identify lessons learned and improve incident response processes.
• Stay up to date with the update cybersecurity threats, vulnerabilities, and industry trends to continuously enhance the organization's security posture.
• Collaborate with internal stakeholders to provide security awareness training and promote a security-conscious culture within the organization.
• Assist with security audits, compliance assessments, and regulatory requirements as necessary.
• Contribute to the development and improvement of cybersecurity policies, procedures, and standards.

理想的求职者
• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Solid understanding of cybersecurity principles, good practices, and industry standards.
• Proven experience in threat modeling assessments, internal penetration testing, and incident response.
• Familiarity with security frameworks such as MITRE ATT&CK, OWASP, and NIST Cybersecurity Framework.
• Hands-on experience with security assessment tools and technologies, such as vulnerability scanners, penetration testing tools, SIEM systems, and forensic analysis tools.
• Knowledge of networking protocols, operating systems, and web application security.
• Proficiency in scripting and programming languages (e.g., Python, Bash) for automation and tool development.

薪酬待遇

- An international platform

- Attractive package