Security Auditor

Comblack is hiring an Application Security Auditor!

What We Offer

• End-to-end involvement in technological projects with a focus on application security, from the initiation phase through production, including the definition of security policies.
• Writing security guidelines and documentation for development teams to ensure secure coding practices, address exposures and security gaps in development and production environments, and implement technological security solutions in application domains.
• Participation in secure architecture design in accordance with company security policies.
• Identifying application-level security gaps and defining required controls.
• Monitoring and enforcing compliance with the Cyber Risk Management directive of the Commissioner of Insurance, as well as organizational procedures and security guidelines across business and technological units.
• Supporting application security assessments, writing scoping documents, validating findings, and ensuring remediation implementation.
• Preparing technical requirement documents for security products and innovative technologies.

What We’re Looking For

• Full proficiency in Application Security and Secure Development Methodologies (SDLC)
• Experience collaborating with development and infrastructure teams
• Hands-on experience with API Management and Security tools such as Apigee, DataPower, etc.
• Deep understanding of cloud technologies and cloud-native applications, with emphasis on Containers, Kubernetes, and Serverless environments
• Practical experience with CI/CD systems, GIT/Repos for code and version management, and Infrastructure as Code (IaC) implementations
• Experience integrating security tools such as CWPP, SAST, DAST, OSS scanners
• Strong familiarity with OWASP Top 10 vulnerabilities and mitigations
• Proven knowledge in Mobile Security
• Experience with Threat Modeling methodologies