VPBANK ★ 3.7

Mô tả Công việc

1. Vulnerability assessment and penetration testing program and responsible for the design and performance of application security robustness tests.

• Develop/implement/trainning/apply security by design framework to Bank
• Security controls end to end for projects/CR make sure new services & system is safe before golive
• Supporting Vendor Security activities to ensure 3rd‐party software and development meets Bank security standards.
• Deliver the annual penetration testing schedule and conducting awareness campaigns to ensure proper budgeting by business lines for annual tests
• Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and mobile applications/devices
• Automate penetration and other security testing on networks, systems and applications
• Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation
• Communicate security issues to a wide variety of internal and external “customers” to include technical teams, executives, risk groups, vendors and regulators
• Trial attacks & incident response
• Research/develop new security standards/technique guidle and apply to bank
• Operate security technologies, control security changes/ensuring the safety of information technology systems
• Continuously improve security controls in the software development process

2. Implement security program to security development

• Participation with key technicque in security projects, security solutions requires a very high of expertise skill
• Consulting for the project to resolve arising problems, beyond the technical scope

3. Develop/implement/apply security by design to Projects

• Develop/implement/trainning/apply security by design framework to Bank
• Security controls end to end for projects/CR make sure new services & system is safe before golive
• Supporting Vendor Security activities to ensure 3rd‐party software and development meets Bank security standards.