Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG
Conduct comprehensive penetration testing of the company's and clients' web systems, applications, and internal network environments, identifying and verifying security vulnerabilities;
Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standards and regulatory/industries requirements, eg MAS TRM, OWASP MSTG
Conduct penetration tests and vulnerability assessments on components including, but not limited to, web & mobile applications, servers, networks, databases and technological devices.
Conduct cloud security assessments across hyperscalers including AWS, Microsoft Azure, and Google Cloud Platform, evaluating configurations against security baselines and benchmarks (e.g., CIS Benchmarks, cloud provider security frameworks, CSA CCM).
Conduct cloud security assessments across hyperscalers including AWS, Microsoft Azure, and Google Cloud Platform, evaluating configurations against security baselines and benchmarks (e.g., CIS Benchmarks, cloud provider security frameworks, CSA CCM).
Conduct cloud security assessments across hyperscalers including AWS, Microsoft Azure, and Google Cloud Platform, evaluating configurations against security baselines and benchmarks (e.g., CIS Benchmarks, cloud provider security frameworks, CSA CCM).
Conduct cloud security assessments across hyperscalers including AWS, Microsoft Azure, and Google Cloud Platform, evaluating configurations against security baselines and benchmarks (e.g., CIS Benchmarks, cloud provider security frameworks, CSA CCM).
Conduct cloud security assessments across hyperscalers including AWS, Microsoft Azure, and Google Cloud Platform, evaluating configurations against security baselines and benchmarks (e.g., CIS Benchmarks, cloud provider security frameworks, CSA CCM).
Plan and execute quarterly vulnerability assessments across the bank's full infrastructure, applications, and API surface. Sr VAPT Engineers own and lead the programme; VAPT Engineers execute assessments and triage findings.