Cyber Security Consultant

Job Summary

Application Security-

• Conduct Security Architecture Reviews (SAR) and secure design assessments for enterprise applications.
• Perform Threat Modelling exercises using industry methodologies such as STRIDE.
• Execute Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Conduct Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, and enterprise applications.
• Identify application vulnerabilities and provide remediation recommendations.

Devsecops & Secure Sdlc-

• Integrate security controls and tools into CI/CD pipelines.
• Implement DevSecOps best practices across development environments.
• Support secure coding initiatives and promote security-by-design principles.
• Collaborate with development teams to remediate security findings effectively.

Risk Management & Compliance-

• Perform security risk assessments for applications, systems, and infrastructure.
• Maintain risk registers and track remediation progress.
• Ensure compliance with security standards and frameworks such as: o OWASP, NIST, PCI-DSS, ISO 27001, GDPR, NESA

Security Operations & Governance-

• Support internal and external security audits.
• Develop security assessment reports and technical documentation.
• Participate in security reviews, governance meetings, and compliance initiatives.
• Monitor project risks, vulnerabilities, and remediation timelines.

Stakeholder Collaboration-

• Work closely with developers, architects, project managers, and business stakeholders.
• Conduct security awareness and secure coding training sessions.
• Provide technical guidance on application security and secure architecture.

Required Technical Skills Core Skills-

• Application Security
• DevSecOps
• Threat Modelling

• Vulnerability Assessment & Penetration Testing

• Secure SDLC

Security Tools-

• Experience with one or more of the following:
• Burp Suite, Veracode, AppScan, Nessus, Fortify, Nmap, SCA Tools, CI/CD Security Tools

Technologies-

• Web Applications, Mobile Applications, APIs, Cloud Security Fundamentals
• CI/CD Platforms

Qualifications-

• Bachelor’s degree in computer science, Information Security, Engineering, or related field.
• Relevant cybersecurity certifications are preferred, such as:
• o CEH o ISO 27001 o OSCP o Security+ o Azure/AWS Security Certifications

Soft Skills-

• Strong analytical and problem-solving abilities.
• Excellent communication and stakeholder management skills.
• Ability to work independently and manage multiple projects.
• Strong documentation and reporting skills.
• Leadership and mentoring capabilities.