Core Responsibilities

Security Strategy Development

• Develop and maintain the company's overall security baseline, covering key areas such as production environments, office networks, key management, and access control.
• Regularly update policies in response to evolving threats, ensuring all departments operate under a unified framework.

Production Environment Security Audits

• Conduct regular reviews of production systems, including network architecture, IAM permissions, API security, and infrastructure configurations.
• Ensure the four-eyes principle and least privilege principle are effectively implemented across all projects.

Vulnerability Management & Penetration Testing

• Lead internal vulnerability discovery and classification.
• Coordinate or execute penetration testing.
• Track remediation progress to ensure closure within agreed SLAs, and report high-r...