Security Test Analyst

SUMMARY:
We are recruiting for a Security Test Analyst position.

POSITION INFO:
Duties and Responsibilities:

• Create and execute test cases based on the approved security requirements and application functionality.
• Utilise estimation techniques to provide accurate effort for testing tasks.
• Split requirements into specific, actionable test cases, ensuring coverage of all necessary scenarios.
• Evaluate the complexity of each test case, considering factors such as functionality, dependencies, and risk areas.
• Testing of applications, systems and solutions which includes front-end, system integration, regression, end-to-end and exploratory testing.
• Applications and systems risk mitigation strategies to address any vulnerabilities identified during the testing, thereby minimizing security vulnerabilities in production to ensure that
• system confidentiality, integrity and availability is maintained.
• Collaborate closely with the developers and business analysts in identifying, logging, and verifying defects in a defect tracker.
• Post implementation testing and go-live support as well as assist in security production support issues and queries.
• Act as a single point of contact for the security testing matters, investigating issues to determine if they are bugs, errors, vulnerabilities or configuration matters.
• Recommend improvements to enhance the overall security posture within the company.
• Stay up to date with the latest and emerging security trends, tools, and technologies to enhance testing approach.
• Provide any other relevant or related information security services to the company as requested from time-to-time by the senior management.

• Designing test cases, product risk mitigation strategies.
• Knowledge of methods, procedures, and tools used to assess
• security assurance processes and practices.
• Reporting on test activities, results, issues and risks.
• User acceptance testing
• Baseline security requirements testing.
• Certification in the information security/ testing field (e.g., Security+, CEH, OSCP, ISTQB).