Cyber Security Specialist

Job content

The Senior Specialist, Cyber Security is responsible to:
i) Ensure the implementation of cyber security policies, standards and regulations, best practice guidelines, support tools and projects in line with the DPDHL security policies and DHL Express IT Security Strategy,

ii) Implementation of fit for purpose cyber security defence and incident response programs globally,

iii) Provide technical guidance, expertise, and education on Cyber Security related framework, best practices, security intelligence, methodology and reporting, and support information asset owners related to a particular cyber security threat/vulnerability assessment, identify appropriate counter measures, and timely response to cyber security incidents.

Tasks:
Support implementation of Cyber Security Program (Cyber Security Expertise Center) in DHL Express
Deliver Application Security Assessment activities with entities within DHL Express and external suppliers/customers
Conduct in-depth assessments on the applications using SAST, DAST, Penetration Testing, Red Teaming Activities to determine application security posture and potential vulnerabilities
Conduct Application Source Code Reviews using SAST Methodology
Provide input guidance to the design and development of solutions selected from the cyber security counter measure plan by conducting Threat Modelling on the applications
Support processes that can be implemented in the project lifecycle of DHL Express projects, and drive the implementation globally
Support global awareness trainings and programs on Cyber Security
Deliver reporting to DHL Express Information Security Committee (ISC) ensuring appropriate visibility to existing and new cyber security intelligent, threats and incidents
Ensure that appropriate security counter measures and plans are developed by Business IT, IT Services and its IT service suppliers
Participate in Cyber Security forum (White/Black hat), law enforcements (Interpol, EUpol, Country SIRT), Security Intelligence agencies/vendors, to ensure that approach is up-to-date with leading edge industry security intelligence and counter measures.
Indirect support of Corporate Functions (Security, Compliance, Data Protection) and external customers/suppliers for cyber security related request
Report the effectiveness of DHL Express cyber security readiness to technical asset owner with explicit focus on high risk / high impact threats/vulnerabilities/incidents and actions being taken for mitigation.
Provide support to the Risk/Compliance/Audit function on DHL Express cyber risk exposures.
Provide input to the design and development of management practices and solutions selected from the cyber security counter measure plan.
Maintain Cyber Security response & reporting plan within areas of responsibility.
Develop and deliver Cyber Security best practices/processes/tool.
Perform threat and vulnerability assessment, and control selection to identify fit-for-purpose counter measures.
Work with global, regional and country stakeholders to support the cyber security reviews.

Requirements:
Minimum 5 to 8 years in Information or Cyber Security, preferably in Applications Security Assessment role.
Minimum 5 to 8 years experiences in Vulnerability Assessment, Penetration Testing & Source Code Reviews of Web, Mobile and Thick Client Applications.
Formal information security accreditation (e.g. CEH, OSCP, CISSP, CISM, CISA,CRISC or equivalent experience).
In-depth knowledge of Cyber Security practices and methodologies.
Good security testing techniques tools and methodologies (OSSTMM and OWASP Top 10, OWASP ASVS, SANS).
DevSecOps experience preferred.
Good operations knowledge on Cyber Security incident investigation and response.
Sound analytic and reasoning skills.
Good organizational and cultural awareness.

Offer:
Strong career support in an international environment
Multifarious benefit program
Access to comprehensive learning programs