Expoint - all jobs in one place

מציאת משרת הייטק בחברות הטובות ביותר מעולם לא הייתה קלה יותר

Limitless High-tech career opportunities - Expoint

Apple Apple Information Security Senior Assessor Engineer 
Japan, Minato 
226332799

18.11.2024
Minimum Qualifications
  • Ability to evaluate, conduct security assessments and monitor security posture of third-party Suppliers.
  • Proven experience in handling and conducting large-scale security remediations with track record of effective threat mitigation.
  • Ability to provide guidance to Suppliers on mitigating risks posed due to open Information Security gaps in assessment reports.
  • Skills to deliver recommendations and timely updates to management on the risk level of Suppliers.
  • Experience working with large-scale, globalized, multi-lingual business environments.
  • Experience with Wireshark, tcpdump, NetFlow, or other tools for analyzing and troubleshooting network traffic.
  • Hands-on experience with security tools like Nmap, Nessus, Burp Suite, or Metasploit.
  • Familiarity with SIEM, IDS/IPS, firewalls, and endpoint protection solutions.
  • Knowledge of security frameworks such as NIST, ISO 27001, SOC 2, or similar.
  • Ability to develop security metrics to track efficiency of controls and remediation efforts and generate reports for management on insight of organization’s security posture.
  • Ability and skills to ensure all security assessments and remediation activities are aligned with relevant regulatory requirements and industry standards.
Preferred Qualifications
  • Outstanding communication skills and attention to details on sophisticated issues within various cultural settings.
  • Strong personal leadership traits such as self-accountability, priority management, and pride in work.
  • Relevant industry certifications such as CISSP, CISM, CRISC, CEH or OSCP.
  • Knowledge in PowerShell, Python, or similar scripting languages for automation and network tasks.
  • Knowledge to interpret and analyze network data from traffic analysis tools and system audits.
  • Familiarity with supply chain security and vendor risk management.
  • Familiarity with cloud security tools and environments (e.g., AWS, Azure).
  • Knowledge of data privacy regulations such as GDPR, CCPA.
  • Knowledge with DevSecOps and security automation practices.
  • Outstanding professional working proficiency in different languages.