Responsibilities

• Advise and assist the development team on the Secure Software development lifecycle activities.

• Provide secure developers training to development community.

• Assist development teams on performing Automated vulnerability scan using IBM Appscan and Static code analysis using Veracode.

• Own and resolve issues arising from vulnerability scanners.

• Provide assistance to the technology teams in the resolution of identified risk and vulnerabilities identified through control assessment and/or security testing.

Requirements

• 3+ years’ experience in a hands-on technical role in Information Security or related discipline.

• Previous experience in application development (Java, C#, etc) will be highly advantageous.

• Excellent written and verbal communication skills and ability to escalate timely to management.

• Ability to define, prioritize and execute process in a structured manner.

• Excellent knowledge of SDLC practices and common security requirements within web and mobile applications.

• Desirable: Knowledge of penetration testing services and techniques.

• Desirable: Experience with a programming/scripting language.

• Desirable: Technical certifications: CISSP, CISA, ISO 2700x.

友邦資訊科技(廣州)有限公司由友邦保險有限公司獨資興辦。公司宗旨是為友邦保險集團屬下全球的業(yè)務單位提供軟件開發(fā)、維護、管理及業(yè)務外包等服務。

公司秉承以客戶為中心的服務理念，不懈地進行有效的持續(xù)改進工程，務求成為友邦保險集團內一流的信息技術和企業(yè)營運中心,為客戶提供高素質的服務和解決方案。公司的業(yè)務主要包括：開發(fā)及維護保險軟件及辦公室自動化、商務外包服務、架構支持（包括數(shù)據中心服務）、產品及工具開發(fā)。