Security Specialist - Part-time - Overlap with EST

Role Overview

Our company is seeking a seasoned Security Specialist for a public tender project involving a national social security institution in the Caribbean. The project entails developing a citizen and employer mobile app (iOS and Android) with its backend, including features such as account management, dashboards, contributions, payments, receipts, pension estimates, and notifications. The role requires ensuring the security and integrity of the app and its backend systems.

Responsibilities

• Conduct threat modeling and review security architecture to ensure robust protection mechanisms.
• Provide input for data protection impact assessments.
• Perform security reviews of app and backend changes, adhering to OWASP Mobile Application Security Testing Guide (MASTG) and API Security Top 10 standards before each release.
• Collaborate with external penetration testers, tracking findings to ensure no critical or high vulnerabilities remain at go-live.
• Map ISO/IEC 27002 controls and prepare security reports for the client.

Required Skills

• Bachelor's degree in cybersecurity, information technology, or a related field.
• Minimum of 5 years in information security, with direct experience in mobile app and API security.
• Proven track record in conducting security assessments, penetration tests, and vulnerability analysis of mobile apps.
• In-depth knowledge of ISO/IEC 27001 and 27002, OWASP Mobile Security Testing Guide, and GDPR-equivalent data protection standards.
• Experience with encryption at rest and in transit, role-based access control, single sign-on, audit logging, and intrusion detection.
• Proficient in TLS configuration and secure API gateway practices.
• Fluent in English.

Nice to Have

• Certifications such as CISSP, CISM, CEH, or equivalent.
• Experience in financial services, government, or social security sectors.
• Background from an accredited penetration-testing firm with the ability to provide named specialist and signed CV.