Tóm lược
- Yêu cầu kỹ thuật:
- Cyber Security ,
- DevSecOps ,
- Security Testing ,
- Java ,
- CSS ,
- Python ,
- MS Azure ,
- DevOps ,
- AWS ,
- API Gateway ,
- DAST ,
- SCA ,
- SAST
Mô tả công việc
Tóm tắt công việc
We're seeking a key member who have had a proven track record of running critical shared application platforms in a production cloud environment. The purpose is to improve the security of NAB applications and DevOps practices through standards, education & awareness with developers, consultation on best practices, development of secure reusable capabilities, and supporting review and remediation of vulnerabilities
YOUR RESPONSIBILITIES
- Ensure respective policy, standards, processes and controls meet regulator and compliance expectations
- Support meeting departmental budgets
- Ensure controls and timely completion of findings and treatment plans
- Ensure and drive security outcomes relating to software development and devops practices
- Ensure and optimize dynamic application security testing tools and API security solutions
- Ensure tools are configured correctly and operating efficiently to provide maximum protection
- Utilise a variety of testing methodologies and tools to uncover potential threats and risks while eliminating the false positives
- Enhancing and updating application dynamic testing methodologies, processes and standards documentation
- Document and evangelise secure API design patterns
- Build and promote code libraries for API security
- Automate continuous security testing of APIs
- Consult with development teams to educate and improve awareness of secure standards and practices
- Support and champion the development of secure and reusable code across development teams to eliminate gaps identified in dynamic and API security testing
- Develop or use tooling to identify security vulnerabilities within our web application footprint
- Produce clear and accurate reporting for stakeholders
- Work with Cyber Engineering & Platforms teams to expand coverage and integrate dynamic and API security testing
- Work with Detection & Response and other Cyber Security teams to ensure critical exposures are mitigated in a timely manner
- Extend support on remediation of dynamic application testing and API vulnerabilities discovered through scanning and security testing
- Help manage the organization's vulnerability intake and remediation process
- Support incident response efforts as required
- Stay abreast of current and emerging technologies, threats and vulnerabilities, and best practice protection methods
- Research and analyse application behaviours to improve security and stability
- Contribute to the evolution of the organization's application security functions and services
- Other activities as required by management
THE BENEFITS AND PERKS
1. Generous compensation and benefit package
- Attractive salary and benefits
- 20-day annual leave and 7-day sick leave, etc.
- 13th month salary and Annual Performance Bonus
- Premium healthcare for yourself and family members
- Monthly allowance for team activities
- Premium welcome kit and frequent appreciation gifts
- Extra benefits for long-term employees
2. Exciting career and development opportunities
- Large scale products with modern technologies in banking domain
- Clear roadmap for career advancement in both technical and leadership pathways
- Well-structured learning and development programs (technical and soft skills)
- Sponsored certificates in both IT and banking/finance
- Premium account on Udemy
- English learning with native teachers
- Opportunity for traveling & training in Australia
3. Professional and engaging working environment
- Hybrid working model and good work-life balance
- Well-equipped & modern Agile office with fully stocked pantry
- Special programs to improve your physical and mental health
- Annual company trip and events
- A solid talented team behind you – great people who love what they do
Yêu cầu công việc
- 3 years of experience working in a Application Security, consulting or related role
- Delivery / execution of API security and dynamic security testing across NAB
- Implement security controls across API Gateways.
- Stakeholder management
- Risk management and compliance
- Experience in securing APIs and Dynamic/Runtime security scanning
- DevOps operating model and technologies
- Development skills
- Vulnerability management
- Working experience in Cloud technologies – AWS and/or Azure
- Hands on with coding: Scripting using Java/Python
- Excellent verbal and written communication skills
- Experience with security tools in SAST (static code testing), SCA (software composition analysis), CSS (container security), DAST (dynamic security testing)
- Tertiary qualified with a Degree in Information Technology or related.
- Having a industry leading cyber security certifications will be a plus
Ngôn ngữ
-
English
Nói: Advanced - Đọc: Advanced - Viết: Advanced
Yêu cầu kỹ thuật
- Cyber Security
- DevSecOps
- Security Testing
- Java
- CSS
- Python
- MS Azure
- DevOps
- AWS
- API Gateway
- DAST
- SCA
- SAST
NĂNG LỰC
- Analytic Skills
- Risk Management
- Communication Skills
Thông tin doanh nghiệp
NAB Innovation Centre Vietnam is owned by NAB - Australia’s largest business bank.
NAB Innovation Centre Vietnam is part of National Australia Bank (NAB) Technology & Enterprise Operations division. The mission of the NICV is to connect the talents of Vietnam to NAB and together improve the lives of those in the Vietnam technology community.
As Australia’s largest business bank, NAB is focused on delivering great experiences for customers. To do this it uses modern technologies, alongside great technology talent including leading software engineers, cloud experts and quality engineers.
We’re working on interesting projects to help NAB’s 8 million customers: By joining us, local software engineers will have access to a wide variety of projects and opportunities, working closely with colleagues in Australia and with global partners such as AWS and Microsoft to take advantage of the latest modern technologies.
We’re investing in you: We strive to create not only a great place to work, but also the best technology centre for tech engineers to thrive.
It’s more than just a career!
We believe in people with ideas and dreams, and we want you to achieve your aspirations. If you have an appetite to learn, grow and elevate others around you, this is the place for you!