Security Test Engineer
Job Description In This Role, Your Responsibilities Will Be:
- Perform security requirements analysis and threat modelling.
- Conduct risk analysis and define test strategies aligned with security objectives.
- Plan, implement, and report on security testing activities, including: Tool and technique selection, Security requirements testing, Threat mitigation testing, Vulnerability testing, Abuse case testing, Attack surface analysis, Regression testing and Test automation
- Analyse, report, and supervise security defects.
- Ensure compliance with internal processes and applicable standards (e.g., IEC 62443, ISO 27001).
- Support internal and external audits as required.
- Drive continuous improvement by staying updated on emerging threats, tools, and standard methodologies.
- Occasional travel may be required, such as training or customer support.
- Proven ability with a minimum 5 years of experience in software and/or firmware testing
- Engineering degree or equivalent experience in Software, Computer Science, Cybersecurity, or equivalent proven knowledge.
- Proficiency with tools such as Burp Suite, OWASP ZAP, Nessus, Metasploit, Wireshark, Nmap, Fortify, Checkmarx.
- Knowledge of scripting languages such as Python, JavaScript, Bash, or PowerShell.
- Understanding of encryption algorithms, key management, and secure protocols (TLS, SSH, etc.)
- Detailed understanding of common vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25).
- Familiarity with Linux, Windows, and network protocols (TCP/IP, DNS,
- Understanding of industrial protocols (e.g., Serial, Modbus, HART).
- Proficiency in industry regulations including IEC 62443, ISO 27001, NIST, OWASP.
- Proficiency in incorporating DevSecOps strategies; Experience with Azure DevOps is a positive attribute.
- Self directed and motivated in a team orientated environment
- Experience implementing DevSecOps standard processes; Azure DevOps experience is a plus.