Preserve the confidentiality, integrity and availability of our information so that it can be safely shared and used to drive our growth and innovation - enabling information confidence Implementation of Application and Platform Security, enabling safe and confident product development in partnership with our developers Empower our people to be security assets - our first line of defense against the threats to our information security Guidance to junior team members on TTPs and novel approaches Assist Cyber Threat Response with incident investigations and aid in technical risk assessments Coordinate with system development and infrastructure units to identify Cyber risks and the appropriate controls for development, day-to-day operation, and emerging technologies Perform regular security assessments including web applications , APIs and mobile apps based on changes in the threat landscape Monitor vulnerability assessments and ethical hacks, ensuring that issues are addressed for the applications that they support Provide information security support with related activities during systems development (e.g. authentication, encryption) Identify and develop new and improved technical procedures and process control manuals Identify significant Cyber threats and vulnerabilities Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firms reputation and safeguarding Xplor, its customers and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency. Qualifications What would make me a good candidate We are looking for people who want to make a difference in Security. Required qualifications for this role: 4 - 8 years experience in Security, IT, or Software Development Strong desire to learn new skills and figure out how things work Familiar with Cloud Services and Technology Infrastructure Critical thinking of the status quo Proactive, self-motivated learner with a strong drive to achieve personal goals Ability to work with remote teams (local, regional and international) Comprehension of Infrastructure as Code and general coding ability Strong at written communications and reporting Willing to develop knowledge across threat hunting and purple team skills Desired Qualifications: Experience of Dev/Sec/Ops deployments and an understanding of the technologies involved Understanding of penetration testing technologies, approaches and methods Desire to learn mobile application testing skills Knowledge of Security Operations Center processes Understands native cloud technologies Knowledge of Python, C#, PHP or Java Knowledge of MSSQL, MySQL, Redis, PostgreSQL Technical certifications and qualifications that this role will develop: Dev/Sec/Ops e.g., CDP / CDE Web application penetration testing e.g., eWPT / eWPTX / OSWE Platform penetration testing e.g., eCPPT / OSCP / OSEP Red team / purple team e.g., CRTO / CRTP