Security Cloud Manager responsible to provide a secure cloud environment and is responsible for production application Penetration Testing, Bug Bounty and Disclosure function within the Vulnerability Management organization,
Security Cloud Manager will oversee the delivery of Salla application vulnerability assessment and remediation consultation, The functions include internal and external penetration testing, and operating Salla's Bug Bounty program.
Responsibilities
- Secure cloud environment including authorization and access permissions.
- Monitoring application’s bugs and vulnerabilities.
- Collaborating and working with related teams to patch and upgrade affected systems and applications .
- Provide application security testing including secure coding techniques and reviews, process and tools, security testing support and guidance for internal software development projects.
- Perform well controlled vulnerability exploitation/penetration testing on applications, network protocols, and databases.
- Perform network reconnaissance, OSINT for SALLA Websites and Products.
- Monitor and configure firewall to secure the cloud network traffic.
- Create security policies , rules, procedures and Documentations.
- Perform manual penetration tests of websites, services, infrastructure and networks to discover and exploit vulnerabilities.
- Understanding of web-based security vulnerabilities, ability to identify and exploit them (e.g. XSS, CSRF, SQLi, session management issues, etc.)
- Checking and recommending Web application security controls at frontend and backend.
Requirements
- Bachelor's Degree in cyber security or Computer Science or similar field
- 5+ years of experience in cloud security filed and Penetration Testing
- Good experience with cloud service providers (AWS, AZURE, Google Cloud, etc). - AWS is required
- Educational or professional background in IT, ideally security
- In-depth understanding of networking
- Good understanding of web and mobile applications
- One or more certifications, including but not limited to GPEN, GXPN, GWAPT, OSCP,WAPT,PTP or OSCE required
- GPEN, GXPN, GWAPT, OSCP, or OSCE required