gso - appsec - sr. associate Information SecurityRe:Sources Global

Company Description
Publicis Re:Sources is the technology and business services backbone of Publicis Groupe.
Publicis Groupe is the 3rd largest communications group worldwide, Leader in digital and Interactive Communication. With activities spanning 104 countries on five continents, Publicis Groupe employs approximately 80,000 professionals. Publicis Groupe offers local and international clients a complete range of communication services.
Job Description
The Senior Associate will conduct vulnerability and penetration testing activities and create the appropriate reports outlining vulnerabilities.
The Senior Associate will need to be familiar with common vulnerabilities and must be proficient in performing manual exploitation of vulnerabilities without the aid of automated tools.
The Senior Associate must have excellent writing skills, including good spelling and grammar skills, as well as a command over the Microsoft Office suite for report preparation.
Must be familiar with top industry Application Security testing tools. (IBM AppScan, Checkmarx, Veracode, Burp Suite and Netsparker)
Proficient in mobile application penetration testing - android and iOS
Proficient in Web application and infrastructure penetration testing
Must have a strong command over HTTP request/response construction and the manipulation of these to achieve the desired results in exploiting various vulnerabilities.
Conduct Application Security Reviews of code, manual as well as using tools
Should be familiar with Metasploit and Python.
Good knowledge of security technologies for secure software development such as cryptography, authentication techniques, protocols etc.
Understanding of DevSecOps and hands-on experience in implementing security aspects in continuous integration, continuous delivery and deployment automation
Strong oral communications and writing skills are a must.
Must be a self starter with strong organizational skills to enable navigation of the company to identify sponsors, stakeholders and interested parties.
Must have a strong command over web application penetration testing or network infrastructure testing.
Qualifications
Bachelor's degree within a science or related discipline.
Good understanding of OWASP Top 10 vulnerabilities, SANS Top 25, OSSTMM, PTES, NIST standards.
2-3 years direct experience in vulnerability and penetration testing.
A 'can do' attitude team player who works well under pressure and with dispersed groups, worldwide.
OSCP, OSWE, CEH and other technical certifications are a plus.
Mandatory language skills (oral, written and listening) : English
Good communication and presentation skills
Ability to work effectively and collaboratively with stakeholders.
Willingness to work with geographically dispersed teams; may involve working during non-business hours occasionally to accommodate time-zone differences.
Travel: This position will periodically visit other offices; may require domestic or international travel.
Additional Information
Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.
This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned.
Re:Sources Global

Makati City, Metro Manila
Permanent
Full-time