Responsibilities

• Advise and assist the development team on the Secure Software development lifecycle activities.

• Provide secure developers training to development community.

• Assist development teams on performing Automated vulnerability scan using IBM Appscan and Static code analysis using Veracode.

• Own and resolve issues arising from vulnerability scanners.

• Provide assistance to the technology teams in the resolution of identified risk and vulnerabilities identified through control assessment and/or security testing.

Requirements

• 3+ years’ experience in a hands-on technical role in Information Security or related discipline.

• Previous experience in application development (Java, C#, etc) will be highly advantageous.

• Excellent written and verbal communication skills and ability to escalate timely to management.

• Ability to define, prioritize and execute process in a structured manner.

• Excellent knowledge of SDLC practices and common security requirements within web and mobile applications.

• Desirable: Knowledge of penetration testing services and techniques.

• Desirable: Experience with a programming/scripting language.

• Desirable: Technical certifications: CISSP, CISA, ISO 2700x.

友邦资讯科技(广州)有限公司由友邦保险有限公司独资兴办。公司宗旨是为友邦保险集团属下全球的业务单位提供软件开发、维护、管理及业务外包等服务。

公司秉承以客户为中心的服务理念，不懈地进行有效的持续改进工程，务求成为友邦保险集团内一流的信息技术和企业营运中心,为客户提供高素质的服务和解决方案。公司的业务主要包括：开发及维护保险软件及办公室自动化、商务外包服务、架构支持（包括数据中心服务）、产品及工具开发。