Application Security Specialist, Jaja

• Bachelor's degree in Computer Science, Information Security, or related field
• Minimum 5 years’ experience in Application Security
• Experience with secure software development methodologies, such as Secure SDLC and DevSecOps
• Understanding of IDEs, Code repositories & CI/CD Solutions
• Proven experience in application security assessment, penetration testing, and vulnerability management
• Strong understanding of web application security concepts, including secure coding practices, authentication mechanisms, and common vulnerabilities (e.g., XSS, CSRF, SQL injection)
• Proficiency in security testing tools and techniques, such as Burp Suite, Sonarqube, Checkmarx, Veracode etc…
• Excellent analytical and problem-solving skills, with the ability to think critically and creatively to address complex security challenges
• Strong communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and communicate technical concepts to non-technical stakeholders

Desirable

• As an Application Security Specialist, you will be responsible for ensuring the security of our Jaja’s software applications throughout their lifecycle
• You will work closely with our development teams to identify and mitigate security risks, implement best practices, and establish robust security measures to protect our applications from potential threats
• Security Assessment: Conduct comprehensive security assessments of new and existing applications to identify vulnerabilities, security weaknesses, and potential risks
• Threat Modeling: Collaborate with development teams to perform threat modeling exercises, identifying potential security threats and implementing appropriate security controls to mitigate risks
• Code Review: Review application code to identify security flaws, coding errors, and vulnerabilities, providing guidance and recommendations for remediation
• Security Testing: Plan and execute security testing activities, including SAST/DAST/IAST, penetration testing, fuzz testing, and vulnerability scanning, to evaluate the effectiveness of security controls and identify weaknesses
• Security Compliance: Ensure that applications comply with relevant security standards, regulations, and industry best practices, such as OWASP Top 10, OWASP ASVS, MAVS, PCI DSS, and GDPR
• Security Architecture: Assist in designing and implementing secure application architectures, including authentication mechanisms, access controls, encryption, and secure communication protocols
• Incident Response: Collaborate with incident response teams to investigate security incidents, analyze root causes, and implement corrective actions to prevent recurrence
• Security Awareness: Promote security awareness among development teams through training sessions, workshops, and educational materials, fostering a culture of security awareness and responsibility
• Documentation: Maintain documentation related to application security, including security policies, procedures, and guidelines, ensuring accuracy and accessibility for relevant stakeholders