Position: Product Security Lead
Category: Security
English level: fluent
Years of experience: 6


• Work with a team of architects and developers, operational leads and functional owners to plan and implement security sprints
• Work closely with application development teams to assess the security posture of applications, security champions programs
• Perform on-going pentesting, code reviews and software composition analyses
• Support secure development practices such as OWASP / BSIMM
• ‘Infrastructure as a code’ security reviews, embedded working with DevOps
• Assist the CISO respond to audit requests from third parties

• Performed variety of security engagements: pentests, code reviews, threat modelling, etc.
• Provided customer consultation involving validation of evidence, remediation recommendations and risk posture to executive management
• Scoped engagements and support the development of proposals and statements of work
• Drove the development of security specifications, standards and processes
• Created and maintained security assessment documentation
• Provided technical training to junior members of the team

• Participated in planning and redesign of existing applications, utilising object-oriented programming in Java
• Provided user support and assistance with troubleshooting, design and configuration
• Drove security culture to move towards SDLC
• Started and managed bug bounty program
Part time remote job.