At Emirates, we believe in connecting the world, to and through, our global hub in Dubai; and in constantly innovating to ensure our customers ‘Fly Better’. Our cyber security team are looking for a dynamic and experienced Senior Security Assurance Analyst to join their team in Dubai. The successful candidate will be expected to develop, implement, lead and continuously improve the security verification and testing processes consisting of but not limited to risk assessments, compliance reviews, vulnerability assessments and penetration tests based on industry best practices and as defined by the assurance. In addition to that, they will collaborate with the team in developing the assurance program on an ongoing basis to incorporate industry best practices, offensive and defensive attack techniques.
What you do bring:
- Represent Cybersecurity assurance capabilities within the agile process as well as drive Cybersecurity best practices across the Emirates Group by executing in-depth automated and manual discovery of security vulnerabilities in web applications, mobile applications, web services and client server application and associated infrastructure
- Research, recommend and implement formal methodologies and tools for conducting technical Cyber security risk assessments, reviews, and investigations.
- Perform impact analysis to achieve the security-by-design objective.
- Monitor and continuously review the Emirates systems on an on-going basis, in compliance with the Emirates Group's Cybersecurity Policies, Principles and Standards.
- Initiate corrective actions in the event of any violations to aid effective risk-based decision making supported with data.
- Plan and schedule regular vulnerability assessments, penetration tests, technical risk assessments and compliance reviews on the Group's Key IT infrastructure components and applications based on the criticality and perceived risk of the applications/services.
Qualifications & Experience
What you will bring:
- Degree in IT or equivalent.
- An information security related industry recognised certification such as CISSP, CISA, CISM, GIAC certification, CEH etc.
Knowledge/skills:
- Strong fundamentals of OS, Network and Programming Concepts
- Deep technical knowledge of OWASP TOP 10 issues for both application & mobile
- Deep technical knowledge of network and infrastructure security testing
- Technical aptitude to test web services, API’s, business logic issues, cloud specific issues etc.
- Develop high quality proof of concepts for vulnerabilities identified
- Adaptive to newer attack vectors & technologies and its applicability
- Proficient in using & implementing open source and commercial tools for application, mobile & thick client security testing
- Experience in reviewing source code for varied programming languages
- Experience building tools and automation to discover vulnerabilities at scale
- Deep technical knowledge of browser security controls such SOP, CSP, XFO, HSTS, etc.
- Knowledge of reviewing mobile & web-based security design, implementation & review.
- Knowledge of industry standard authentication and authorization mechanism, Dockers, Kubernetes
Certifications:
- Offensive Security Certified Professional (OSCP) – Preferred
- GIAC Web Application Penetration Tester (GWAPT) – Preferred
- Certified Information Systems Security Professional (CISSP) – Preferred
- Excellent interpersonal & communication skill
Salary & Benefits
Join us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry, including discounts on flights and hotels stays around the world. You can find out more information about our employee benefits in the Working Here section of our website www.emirates.com/careers. Further information on what’s it like to live and work in our cosmopolitan home city, can be found in the Dubai Lifestyle section.
Apply here
