We are seeking an experienced Application Security Specialist to remediate application-layer security risks for one of our most sizeable industry-leading in-house.
Your new role
If you fulfil all the qualifications mentioned above and have the drive to succeed, click apply below!
Your new role
- Identify, validate, prioritise, and track security vulnerabilities across the e-commerce platform and other B2C and B2B web services, applying defined risk-based prioritisation criteria.
- Coordinate with application owners, developers, infrastructure teams, and business stakeholders to drive timely and effective remediation of security findings.
- Manage vulnerability reports from regular penetration-testing providers and crowdsourced/bug-bounty programmes, including triage, validation, severity assessment, stakeholder communication, remediation follow-up, and closure verification.
- Provide practical application-security guidance to development teams, including secure coding practices, secure-by-design principles, and remediation recommendations.
- Configure, maintain, tune, and monitor Web Application Firewall (WAF) and website protection controls, balancing strong protection with low false-positive impact.
- Support web application security incident response, including investigation, containment, escalation, remediation coordination, and post-incident review.
- 4+ years of experience in IT Security, while 2+ years focused on web application security
- Strong understanding of common web application vulnerabilities and mitigation techniques, including the OWASP Top 10
- Hands-on experience with Web Application Firewalls, including policy configuration, rule tuning, log analysis, and false-positive management.
- Experience handling penetration-test findings and/or bug-bounty submissions, from triage through remediation and validation.
- Knowledge of security testing tools and techniques, such as Burp Suite, DAST/SAST tools, and vulnerability scanners, is an advantage.
- Relevant certifications such as OSCP, GWAPT, CEH, CSSLP, or equivalent are desirable but not essential.
If you fulfil all the qualifications mentioned above and have the drive to succeed, click apply below!
Job ID 1292583
Hays Hong Kong Limited ("Hays Hong Kong") is the one of the leading specialist recruitment companies in Hong Kong in recruiting qualified, professiona...
More Jobs From Hays
Hays
Hong Kong
Boost your career
Find thousands of job opportunities by signing up to eFinancialCareers today.More Jobs Like This