Cybersecurity Expert

Job Summary Key Responsibilities: · Perform application security assessments, vulnerability testing, and code security reviews. · Identify, analyze, prioritize, and support remediation of security vulnerabilities in web, mobile, API, and backend applications. · Integrate security controls and best practices throughout the Software Development Life Cycle (SDLC). · Review application architecture, APIs, authentication, authorization, session management, and data protection mechanisms. · Work closely with software development, DevOps, QA, infrastructure, and cybersecurity teams to implement secure development practices. · Provide secure coding guidance and support developers in resolving identified security issues. · Monitor emerging application security threats, vulnerabilities, and attack techniques. · Support security testing before application releases and major system changes. · Maintain application security documentation, vulnerability reports, risk assessments, and remediation tracking. · Support incident investigation and root-cause analysis for application-related security events. · Ensure applications follow recognized security standards and best practices, including OWASP guidelines and secure coding principles. Job Requirements Required Qualifications: · Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Information Technology, or a related field. A Master’s degree is preferred. · Strong understanding of application security principles, secure coding practices, and common software vulnerabilities. · Knowledge of OWASP Top 10, API security, authentication, authorization, session management, and data protection. · Hands-on experience with SAST, DAST, vulnerability scanning, and application security testing tools. · Familiarity with programming or scripting languages such as Python, kotlin, Java, JavaScript, C#, PHP, or similar technologies. · Experience assessing the security of web applications, mobile applications, APIs, and backend services. · Understanding of secure SDLC, threat modeling, code review, and vulnerability management. · Knowledge of networking, operating systems, databases, encryption, and security protocols. · Familiarity with Git, CI/CD pipelines, DevSecOps practices, and containerized environments. · Ability to analyze security findings, determine risk, and provide practical remediation recommendations. · Strong analytical, problem-solving, documentation, and communication skills. · Ability to collaborate effectively with development, DevOps, QA, infrastructure, and cybersecurity teams. Preferred Qualifications: · Hands-on experience in web and API application security testing. · Practical knowledge of OWASP Top 10 and common application vulnerabilities. · Experience with manual penetration testing and vulnerability assessment. · Practical experience with tools such as Burp Suite, OWASP ZAP, Nmap, or similar tools. · Basic experience with secure code review and secure coding practices. · Knowledge of authentication, authorization, session management, input validation, and data protection. · Familiarity with Android and iOS application security is an advantage. · Experience working with developers to identify and remediate application security issues. · Relevant cybersecurity training or certification such as CEH, Security+, eJPT, or equivalent is an advantage. Plus, Points: · Experience with Android and iOS application security testing. · Familiarity with API security testing and common API vulnerabilities. · Basic knowledge of secure code review in languages such as Java, Kotlin, JavaScript, PHP, or Python. · Hands-on experience with Burp Suite and/or OWASP ZAP; familiarity with MobSF or similar mobile application security tools is an advantage. · Familiarity with Git, CI/CD, and DevSecOps practices. · Experience participating in CTFs, bug bounty programs, or practical security labs. · Knowledge of application authentication, authorization, encryption, and secure data storage. · Experience working directly with developers to verify and remediate security findings. · Relevant application-security training or certification is an advantage. Experience Requirement: · 5+ years of relevant experience in application security, penetration testing, or secure software development. · Hands-on experience in web and API security testing. · Practical experience identifying, assessing, and supporting remediation of application vulnerabilities. · Experience using tools such as Burp Suite, OWASP ZAP, or similar application security tools. · Experience with OWASP Top 10, secure coding practices, and vulnerability assessment. · Experience working with developers to verify, prioritize, and remediate security findings. · Experience with mobile application security testing for Android or iOS is an advantage. · Familiarity with secure SDLC, code review, and application security testing before release is preferred. What We Offer: · Competitive salary based on qualifications and experience. · Hands-on work with real-world application security projects. · Opportunities to strengthen skills in web, API, and mobile application security. · Access to practical security testing tools and secure development environments. · Collaboration with software development, DevOps, QA, and cybersecurity teams. · Opportunities for technical training, professional development, and career growth. · Opportunity to contribute to secure, locally developed, and self-hosted applications.