Junior Information Security Engineer

JOB DESCRIPTION

Evamp & Saanga is leading ICT solution provider and The Information Security Department serves as the process owner for all activities related to availability, integrity, and confidentiality of customer, employee, and business information in compliance with the various information security policies and procedures. The Junior Information Security Engineer will carry out the responsibilities of the position in accordance with Information Security Policies and Procedures. They will work with the Information Security Committee to ensure cooperative efforts are being made with all partners as appropriate.

The successful candidate will have broad technical knowledge and general understanding of methods used to protect both corporate and customer-facing applications, systems and network infrastructures. In addition, the candidate must possess excellent oral and written communication skills and should have a can-do attitude. Experience in presenting technical issues to a wide variety of audiences will be highly appreciated.

Essential Duties and Responsibilities

• Review software changes and state their impact on certain programs in the system

• Assess vulnerabilities and work with developers to fix them

• Participates in the organization’s disaster recovery, business continuity, and incident response plans for information systems

• Promotes activities to foster information security awareness within the organization

• Participates in internal security risk assessments, security risk assessments of third party business partners, and detailed security risk assessments of various technologies (i.e. directory services, database platforms, web services, firewalls, remote access, etc)

• Works with information security management to administer, maintain, and continuously improve internal controls and compliance programs, investigate known or suspected security incidents, support internal and external audits.

• Ensure reports and findings are delivered in a timely and appropriate manner to management.

• Participate in a variety of projects while being responsible, with a team, in implementing, administering, etc. pragmatic information security controls to meet dynamic tactical and strategic information security objectives.

Job Requirements

· BS/MS degree in Software Engineering, Computer Science, IT or Information Security

· Information Security Certifications are desirable but not necessary

· Knowledge and experience of OWASP tools and methodologies

· Knowledge of experience of working with penetration testing tools and techniques

· Understanding of HTTP and web programming

· Knowledge of common security requirements within web and mobile applications for different platforms and programming languages

· Knowledge of standard SDLC practices

· Ability to complete tasks and deliver professionally written reports for clients

· Ability to present findings to technical staff and executives

· Strong ethics and understanding of ethics in business and information security

· Proficient English language written and oral communication skills

· Understanding and familiarity with common code review methods and standards

Job Details

Functional Area:
Total Positions:
1 Post
Job Shift:
First Shift (Day)
Job Type:
Job Location:
Gender:
No Preference
Age:
24 - 30 Years
Minimum Education:
Bachelors
Degree Title:
BS
Career Level:
Experienced Professional
Minimum Experience:
1 Year (1 Year - 3 Year)
Work Permit:
Pakistan
Apply Before:
Dec 17, 2016
Posting Date:
Nov 16, 2016

Evamp and Saanga

Information Technology · 101-200 employees - Islamabad

pEvamp & Saanga is a leading developer of Web, Mobile, Voice and Telecom related applications and solutions in Pakistan. Our focus since 2001 has been to design and develop innovative applications in this niche. In addition to our own product development, we offer development services, system integration and managed services for clients. In development, we specialize in mobile server and mobile client based applications, IVR and voice applications, Telecom Delivery Platforms, Corporate Portals and Content Management Systems. For system integration we have been involved with international ICT companies deploying their software and hardware platforms at various blue-chip clients in Pakistan./p

What is your Competitive Advantage?

Get quick competitive analysis and professional insights about yourself
Talk to our expert team of counsellors to improve your CV!
Try Rozee Premium
I found a job on Rozee!