I'm looking for Application Security - RTS Platform & Data Platformwith below Skillsets:
Salary: 4000 - 4500 USD/month
Primary/General Job Purpose:
- Encourage Shift Left Mindset - Proactively embed security requirements, by influencing implementation of security & privacy patterns from the start of the development cycle
- Implement via Influence - Influence stakeholders such as Product Owners, Solution Architects, Developers, Testers, Engineers & others to include security patterns into features, epics and stories in order to build secure, innovative & superior digital products for customers and employees
- Assessments Perform security assessment and perform gap analysis to provide appropriate remediations to the teams for implementing the fixes.
Technical Requirement:
- General Cyber/Information Security concepts such as Segregation of Duties (SoD), Least Privilege, Need to Know, Data At Rest Encryption (DARE), Data in Transit Encryption, Role Based and/or Attribute Based Access Control (RBAC/ABAC)
- Regulatory requirements such as PCI-DSS & GDPR (and/or similar)
- Application & Mobile Security (IOS/Android) including but not limited to Source Code Reviews and Black, White & Gray Box testing
- API Security
- Container Security / Kubernetes / Open Shift
- Virtual Machines
- Web App Firewall (WAF) and/or Packet Filtering Firewalls
- CI/CD
- Access Control
Technology Landscape:
- Enterprise Data Warehouse (EDW) technologies such as Cloudera Data Platform (CDP), Hadoop, Hana, Hive, Informatica , Spark, Yarn, Oozy, etc.
- Technologies that implement security within the EDW domain, such as Ranger, Atlas, Knox, Hadoop Encryption Zones and/or similar
- Reporting platforms such as Microsoft Power BI, Tableau and Custom-built reporting UI (e.g. built in React JS)
- Deployment of reporting platform technologies on form factors such as Web & Tablet (IOS
/ Android)
- Database platforms such as Oracle, Mongo DB, Redis & Elastic
- Real Time Streaming (RTS) platforms such as Kafka & Flink
- CI/CD Pipeline technology such as Git Hub Actions and/or Jenkins