Cybersecurity Consultant (AppSec, VAPT & DevSecOps)

Emplaced in public agencies, you will collaborate with stakeholders and will be responsible for: Establish Standards: Define and maintain the Ministry-wide framework for security testing (Vulnerability Assessment and Penetration Testing - VAPT). SOP Development: Create and roll out Standard Operating Procedures (SOPs) to guide Agency project teams on engaging external security vendors and managing internal testing cycles. Quality Assurance: Develop "Quality Rubrics" to help agencies evaluate the performance of pen-testers.

You will conduct periodic sampling of testing reports and project involvements to ensure quality and rigour across the Ministry Family. Support security tools such as CSPM, VMS, etc and follow up as part of remediation. Assisting in the development of agency-specific security requirements, reviewing and providing consultancy on the project-specific application and system security architecture to ensure that key security requirements are defined and designed into the systems, implemented in accordance to the security design, and in compliance with prevailing ICT security policies, standards, and guidelines.

Secure Coding Standards: Establish Ministry-wide secure coding guidelines (e.g., based on OWASP, SANS) to ensure developers build security into the application layer from day one. Source Code Analysis: Lead the strategy for Static Application Security Testing (SAST) and Software Composition Analysis (SCA). You will evaluate tools