Consultant Cyber Security-Nadra, Islamabad

National Database and Registration Authority (NADRA), Islamabad                                                                            Qualification:

• BS COMPUTER SCIENCE or BS Information Security Preferred Qualification: Masters in Information Security / Computer Science or equivalent.
• Offensive Security Certified Professional (OSCP) certification or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) certification.

Experience:

• At least 7 years of experience in the field of offensive cyber security operations or offensive cyber security research..                                                                              

Jobs Responsibilities:

• Establishment of Static Application Security Testing (SAST), Software Composition Analysis (SCA) and Dynamic Application Security Testing (DAST) operations according to latest standards.
• Conduct regular security assessments of the client’s software and infrastructure associated with the services provisioned to them by the organization.
• Development of continuous API security assessment mechanism in the organization.
• Implementation of Security Development Lifecycle (SDL) with assistance in integration, management, and configuration of DevSecOps tools.
• Establishment of complete vulnerability assessment and patch management lifecycle in the organization.
• Development of security gap analysis mechanism of preventative security controls (firewalls, endpoint protection etc.) deployed in the organization to continuously analyze their effectiveness.
• Conduct simulated cyber-attacks to identify weaknesses and cyber-attack vectors in the organization’s infrastructure.
• Establishment of red team operations to assess the organization’s overall security readiness and resilience