Job Opening for Product Security Officer

Hi Ian,

 

I have CompTIA Security and CCNA certificates, but no working experience in security. is there any role for me in your company?

 

many thanks

Hi folks!

We currently have an opening in our company (Bosch Security Systems) and I think this would be the correct place to post this since most members would already be in the security domain.

---

<strong>Entry Qualification:</strong>
Recognized Degree in IT/Computer Science or a relevant discipline.

<strong>Preferred Years of Experience:</strong>
Min. 6 years of work experience in information security risk management in product development

<strong>Key Requirements / Desired Personal Qualities:</strong>
Experience in designing software development products using SDLC (i.e., Agile, DevOps)

Familiar with Information Security Management Systems (ISO/IEC 270001 )
Certified Information Systems Security Professional (CISSP) OR Certified Information Security Manager (CISM)* Preferred.

Have practical security knowledge on Hardware and Software level. Able to run security analysis against software products (like, Ÿ??ThreatŸ? Analysis, Ÿ??STRIDEŸ? Analysis, Authentication Authorization, Encryption, STS, Port Scanning, Penetration Tests etc.)

Detailed technical knowledge of techniques, standards and state-of-the art capabilities for authentication and authorization, applied cryptography, security vulnerabilities and remediation.

Adequate knowledge of Web Services, Service Oriented Architectures (SOAP, REST), MicrosoftŸ??s Windows Communication Foundation (WCF) and IP network related protocols.

Good analytical and problem solving skills, self-motivated and proactive approach.

Excellent verbal &amp; written communication abilities

---

Btw, I'm not from HR or a headhunter. I'm part of the development team and just doing my part to help find the right person for the role
If you or anyone you know is interested maybe send me a message and we'll proceed from there.

Regards,
Ian

sounds interesting, is this a new or replacement role?

This is a new role.

does this roles require the person to perform VA/PT, web PT?

Most likely since it is in the requirements:
<em>Able to run security analysis against software products (like, ƒ??Threatƒ? Analysis, ƒ??STRIDEƒ? Analysis, Authentication Authorization, Encryption, STS, Port Scanning, Penetration Tests etc.)</em>