Who we are: Quantion is a Business Digital Transformation services company born in 2015. Our services are based on a Digital Factory model. Through this model, we help companies to accelerate their digital transformation projects with an end-to-end approach. We have +120 professionals in application development, UX/UI, and digital business transformation to build innovative solutions oriented to business results. As a Digital Factory, we combine our teams in cutting-edge technologies and digital deep experiences with the innovation ecosystem to ensure that we can provide the best solution to face business challenges, from its concept to its implementation.
We are looking for an IT Security Expert to join our Tech. team.
If you want to participate in one of our biggest International projects, don't hesitate to apply!
What you will do:Assess possible IT Security risks in the client environment and develop countermeasures.Conduct research regarding the current trends and developments in IT Security technologies.Define security requirements for interfaces, processes, software development, and related technology, and operate tools to ensure security in this area.Constantly improve the Information Security Management System (ISMS) and ensure ISO 27000 certification.Engage in and organize security trainings and ensure that the team is aware of possible risks and knows how to react to IT security threats.Be the main contact person for all questions regarding IT Security.Align our IT Security strategy with the developer teams and ensure a transparent implementation.Support audits (internal and external) on implemented IT security measures.Work in an international environment with a highly diverse team. Required skills:At least 2 years of experience as an IT Security Expert.2+ years of professional experience in the field of Software Development and/or Quality Assurance.Profound understanding of IT Security technologies at their functional level.Ability to transfer security requirements out of risk analysis and threat model results into both system and functional levels.Practical understanding of web application security issues.Working knowledge of common security tools (fuzzers, Burp Pro, SonarQube, Checkmarx, etc.).Understanding of main security-related activities in development such as Security Requirements gathering, Risk Assessment, Security Code Review.Knowledge about standards: OWASP ASVS, OWASP Top 10, CWE Top 25.Ability to analyze and identify possible IT Security issues and develop appropriate IT Security technologies to resolve them.Experience with Azure Policies, Azure Defender for Cloud is a plus.Knowledge of Container Security.Familiarity with DevSecOps.Optionally, experience in areas such as ITIL, COBIT, NIST, and ISO 27000x or comparable frameworks/standards.Experience in working in cross-functional teams in an agile environment.Willingness to expand comfort zones by sometimes leaving them.Very good command of the English language.
#J-18808-Ljbffr
