We are seeking an experienced Application Security Specialist to remediate application-layer security risks for one of our most sizeable industry-leading in-house.
Your new role
Identify, validate, prioritise, and track security vulnerabilities across the e-commerce platform and other B2C and B2B web services, applying defined risk-based prioritisation criteria.
Coordinate with application owners, developers, infrastructure teams, and business stakeholders to drive timely and effective remediation of security findings.
Manage vulnerability reports from regular penetration-testing providers and crowdsourced/bug-bounty programmes, including triage, validation, severity assessment, stakeholder communication, remediation follow-up, and closure verification.
Provide practical application-security guidance to development teams, including secure coding practices, secure-by-design principles, and remediation recommendations.
Configure, maintain, tune, and monitor Web Application Firewall (WAF) and website protection controls, balancing strong protection with low false-positive impact.
Support web application security incident response, including investigation, containment, escalation, remediation coordination, and post-incident review.
What you'll need to succeed
4+ years of experience in IT Security, while 2+ years focused on web application security
Strong understanding of common web application vulnerabilities and mitigation techniques, including the OWASP Top 10
Hands-on experience with Web Application Firewalls, including policy configuration, rule tuning, log analysis, and false-positive management.
Experience handling penetration-test findings and/or bug-bounty submissions, from triage through remediation and validation.
Knowledge of security testing tools and techniques, such as Burp Suite, DAST/SAST tools, and vulnerability scanners, is an advantage.
Relevant certifications such as OSCP, GWAPT, CEH, CSSLP, or equivalent are desirable but not essential.
What you need to do now
If you fulfil all the qualifications mentioned above and have the drive to succeed, click apply below!
All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.
Be the first to receive the latest Others Contract Jobs in Hong Kong.
Setup your job alert:
By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime.
Skip
GrabJobs is the no1 job portal in Hong Kong, connecting you to thousands of jobs fast!
Find the best jobs in Hong Kong, apply in 1 click and get a job today!