Applications Security Assessor
Synopsys Inc
Belfast, Northern Ireland, United Kingdom
Responsibilities: Successfully complete our 10+ week custom internal training program – with the aim to demonstrate that you have: Acquired a sufficient understanding of the Products, Platforms & Tools required to secure web applications and ensure a Safe Digital Experience. Built the necessary level of knowledge on the Security Concepts & Principles, and Processes & Technologies needed to support our customers. Perform manual vulnerability assessments for customer web applications, including APIs Create custom vulnerability descriptions and solutions along with instructions on how to reproduce the vulnerability in question. Collaborate with cross functional teams (locally & globally) to support customer obligations and deliver projects to agreed deadlines. Review and interpret web application & vulnerability profile data – from our technology, platforms, products, and customers. Manage own tasks and projects to agreed deadlines. Analyze application architecture for security design flaws. Other ad-hoc duties as required. Required: Good technical acumen, ability to quickly digest concepts/principles and apply practically. Strong analytical & problem-solving ability. Ability to demonstrate ownership for personal & professional development. Successfully navigates operating autonomously and working collaboratively as part of a team. Capability to communicate concepts, issues and solutions to others. Contributes to a positive and healthy team environment. Self-motivated, enthusiastic and promotes a can-do operating style. Understanding of common web application security issues i.e., OWASP Top 10 and SANS Top 25 At least 1 year of work experience in Application Security, Cyber Security or similar Some experience performing security assessments on web applications Exposure to Web and/or Application Security Desired: ~ 3+ years of experience finding, reporting, or verifying application vulnerabilities In depth knowledge of industry standard application vulnerabilities (OWASP, WASC, CWE Top 25, etc.) In depth knowledge of web browsers, web applications, and APIs Knowledge and experience with HTML, JavaScript, and server-side languages such as .NET, PHP, and Java Knowledge and experience with industry standard application security tools Ability to concurrently manage multiple, highly complex tasks Interpersonal, written, and verbal communication skills Excellent problem solving and analytical skills