Security Test Analyst at Nambiti Technologies (Pty) Ltd

Duties and Responsibilities:

• Create and execute test cases based on the approved security requirements and application functionality. 
• Utilise estimation techniques to provide accurate effort for testing tasks. 
• Split requirements into specific, actionable test cases, ensuring coverage of all necessary scenarios. 
• Evaluate the complexity of each test case, considering factors such as functionality, dependencies, and risk areas. 
• Testing of applications, systems and solutions which includes front-end, system integration, regression, end-to-end and exploratory testing. 
• Applications and systems risk mitigation strategies to address any vulnerabilities identified during the testing, thereby minimizing security vulnerabilities in production to ensure that system confidentiality, integrity and availability is maintained. 
• Collaborate closely with the developers and business analysts in identifying, logging, and verifying defects in a defect tracker. 
• Post implementation testing and go-live support as well as assist in security production support issues and queries. 
• Act as a single point of contact for the security testing matters, investigating issues to determine if they are bugs, errors, vulnerabilities or configuration matters. 
• Recommend improvements to enhance the overall security posture within the company. 
• Stay up to date with the latest and emerging security trends, tools, and technologies to enhance testing approach. 
• Provide any other relevant or related information security services to the company as requested from time-to-time by the senior management.

Requirements:

Four years’ experience or more in four out of the six areas of security testing specialization namely:

• Designing test cases, product risk mitigation strategies.
• Knowledge of methods, procedures, and tools used to assess 
• security assurance processes and practices.
• Reporting on test activities, results, issues and risks.
• User acceptance testing
• Baseline security requirements testing.
• Certification in the information security/ testing field (e.g., Security+, CEH, OSCP, ISTQB).