Monroe Consulting Group Philippines, a premier executive recruitment firm, is partnering with one of the world's most innovative technology and consulting companies to identify exceptional talent. Our client, a globally recognized technological leader, is dedicated to driving innovation and supporting its customers' core business processes through cutting-edge solutions.
We are currently seeking a highly skilled Security Engineer (Attack Surface Management) to join our client's dynamic team in Ortigas, Pasig.
About the Role:
- The Security Engineer (Attack Surface Management) plays a critical role in safeguarding the organization's digital assets by proactively identifying and mitigating potential vulnerabilities. This position focuses on leveraging Threat Exposure and Attack Surface Management (TASM) platforms and related tools to enhance the organization's security posture and resilience against cyber threats.
Key Responsibilities:
Threat Exposure and Attack Surface Management (TASM):
- Design, implement, and manage Threat Exposure and Attack Surface Management (TASM) platforms or similar systems.
- Analyze attack surfaces and provide actionable insights to minimize vulnerabilities.
- Regularly assess and improve the effectiveness of security measures to align with industry standards.
Vulnerability Assessment (VA):
User and Role Management:
- Create, modify, and manage user accounts, ensuring appropriate roles and permissions (e.g., administrator, analyst, auditor).
- Enforce least privilege principles to restrict access to sensitive functions.
- Implement and maintain multi-factor authentication (MFA) for enhanced security.
System Configuration and Maintenance:
- Install and configure vulnerability assessment tools on servers or virtual machines.
- Perform regular software updates and patch management to ensure system security and functionality.
- Monitor system health and performance, addressing any issues promptly to maintain high availability.
Web Application Security:
License Management:
- Manage licenses and subscriptions to ensure uninterrupted access to the tools and features.
User and Role Management:
- Assign roles and permissions tailored to individual responsibilities (e.g., developer, tester, security analyst).
Mobile Application Security:
Environment Management:
- Set up and maintain testing environments, including emulators, real devices, and required frameworks.
CI/CD Integration:
- Seamlessly integrate mobile app testing into the continuous integration and continuous delivery (CI/CD) pipeline for automated testing and real-time feedback.
Qualifications:
- At least 8 years of experience in Threat Exposure and Attack Surface Management (TASM) platforms or similar systems.
- Proven expertise in vulnerability assessment, user and role management, and system configuration and maintenance.
- Strong knowledge of web and mobile application security, including license management and CI/CD integration.
- Hands-on experience in setting up and managing testing environments for mobile applications.
- Familiarity with industry best practices for security and vulnerability management.
