Information Security Test Analyst

SUMMARY:
We are recruiting for an Information Security Test Analyst role. In this role, you will be expected to assist with testing applications, systems, and solutions to ensure that the organization’s security requirements are met before deployment into the production environment.

POSITION INFO:
Required:

• Must have an information technology-related diploma or degree.
• A professional security/ testing certification (e.g., Security+, CEH, OSCP, ISTQB).
• With a minimum of 4 years’ experience as an Information Security Test Analyst.

• Create and execute test cases based on the approved security requirements and application functionality.
• Utilise estimation techniques to provide accurate effort for testing tasks.
• Split requirements into specific, actionable test cases, ensuring coverage of all necessary scenarios.
• Evaluate the complexity of each test case, considering factors such as functionality, dependencies, and risk areas.
• Testing of applications, systems and solutions which includes front-end, system integration, regression, end-to-end and exploratory testing.
• Applications and systems risk mitigation strategies to address any vulnerabilities identified during the testing, thereby minimizing security vulnerabilities in production to ensure that system confidentiality, integrity and availability is maintained.
• Collaborate closely with the developers and business analysts in identifying, logging, and verifying defects in a defect tracker.
• Post implementation testing and go-live support as well as assist in security production support issues and queries.
• Act as a single point of contact for the security testing matters, investigating issues to determine if they are bugs, errors, vulnerabilities or configuration matters.
• Recommend improvements to enhance the overall security posture within the organization.
• Stay up to date with the latest and emerging security trends, tools, and technologies to enhance testing approach.
• Provide any other relevant or related information security services to the organization as requested from time-to-time by the senior management.