Graduate Trainee - Information SecurityExpiring Today!

• Assist in monitoring security alerts from SIEM, endpoint detection and response (EDR), firewalls, and other security tools.
• Support the investigation, documentation, escalation, and tracking of security incidents.
• Review security logs and assist in identifying suspicious activities and potential threats.
• Support incident response exercises and follow-up on remediation actions.
• Assist in conducting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and Interactive Application Security Testing (IAST).
• Support vulnerability assessments and authorized penetration testing of web applications, APIs, mobile applications, and supporting infrastructure.
• Document identified vulnerabilities, assess their severity, and track remediation with development and IT teams.
• Assist in validating security fixes and conducting regression security testing.
• Support secure coding reviews and the application of OWASP security guidelines.
• Assist in conducting information security risk assessments and third-party security due diligence.
• Support IT controls validation, audit evidence collection, and compliance reviews.
• Assist in maintaining IT risk registers, vulnerability trackers, audit findings, and remediation plans.
• Assist in reviewing information security policies, procedures, standards, and control documentation.
• Support compliance with applicable data protection, cybersecurity, and financial-sector regulatory requirements.
• Support the development and delivery of staff security awareness initiatives.
• Assist in phishing simulation exercises and track staff participation and reporting rates.
• Promote secure handling, classification, storage, transmission, and disposal of sensitive information.
• Support privacy and data protection assessments.
• Assist in security testing of new systems, application releases, APIs, and technology changes.
• Document functional security defects and communicate findings to relevant technical teams.
• Support user acceptance testing (UAT) and release security readiness assessments.
• Track defects and verify that agreed security requirements have been implemented.
• Prepare periodic security activity reports, dashboards, and management summaries.
• Maintain accurate records of security incidents, assessments, vulnerabilities, and remediation activities.
• Assist in preparing evidence for internal audits, external audits, and regulatory reviews.
• Research emerging cybersecurity threats, vulnerabilities, and recommended security controls.

Qualifications & Experience:

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, Software Engineering, or related discipline.
• Recent graduate or candidate with limited professional experience seeking practical information security exposure.
• Relevant cybersecurity certifications or training will be an added advantage.

Skills & Competencies:

• Basic understanding of information security principles, networking, operating systems, and common cybersecurity threats.
• Familiarity with the OWASP Top 10 and web application security concepts.
• Basic knowledge of DevSecOps and security testing tools such as, Burp Suite, Black Duck, Corgea, Frida, MobSF, Snyk or equivalent.
• Familiarity with SIEM, EDR, NDR, SOAR and SOC concepts.
• Familiarity with QA tools such as Postman, Jmeter, Locust, Selenium, etc.
• Basic scripting or programming knowledge in Python, PowerShell, Bash, or a similar language is an advantage.