Công Nghệ An Ninh Không Gian Mạng Việt Nam

Tóm tắt công việc
We're seeking a key member who have had a proven track record of running critical shared application platforms in a production cloud environment. The purpose is to provide application security consulting and capability uplift to NAB asset teams by providing support on onboarding, CICD integration support, vulnerability management, reporting and assessing developer training requirements.
At NAB, we believe success comes from our people. We're committed to supporting your talent and skills through your career, as you help us build a culture that affects change for our customers and for the community too.
YOUR RESPONSIBILITIES
Consulting asset teams by assisting with prioritisation of vulnerability remediation, onboarding and reporting
Support teams to integrate tools to strategic pipelines.
Drive security control compliance
Identify developer security training requirements based on vulnerability trends using data insights.
Manage security guidance and assurance documentation
Identify and drive remediation of OWASP Top 103-5 years of experience working in a Application Security, consulting or related role
An understanding of Security principles in software development.
Working experience in Cloud technologies - AWS and/or Azure
Hands on with coding: Scripting using Java/Python
DevOps/DevSecOps background
Consulting mindset
Excellent verbal and written communication skills
Experience with security tools in SAST (static code testing), SCA (software composition analysis), CSS (container security), DAST (dynamic security testing)
Good understanding of security concepts related to container security, supply chain and cloud.
Technical understanding to assist asset teams triage vulnerabilities and drive prioritisation
Proven ability to work both individually and within a team environment (at times with little guidance), build strong relationships and maintain rapport with internal NAB stakeholders and 3rd party service providers
Tertiary qualified with a degree in software development or similar