|
IT Security Specialist- Applications job at Q-Sourcing
Posted by: great-volunteer
Posted date: 2025-Aug-13
Location: Uganda, Kampala
IT Security Specialist- Applications 2025-08-12T23:37:06+00:00 Q-Sourcing https://cdn.ugashare.com/jsjobsdata/data/employer/comp_7433/logo/Q-Sourcing.png https://www.qsourcing.com/ FULL_TIME Uganda Kampala 00256 Uganda Human Services Computer & IT 2025-08-25T17:00:00+00:00 Uganda 8 Q-Sourcing Limited trading as Q-Sourcing Servtec is a manpower management solutions firm operating in the East African Region in the countries of Uganda, Kenya, Tanzania, Rwanda, and South Sudan. On behalf of our client in Uganda in the Banking Sector, we are looking for a competent and experienced Manager- Cyber Defense to work in Kampala Uganda. Purpose of the Role: Reporting to the Manager- Cyber Defense, the IT Security Specialist- Applications is responsible for ensuring the security and integrity of software applications by implementing, monitoring, and managing security measures to protect against vulnerabilities, threats, and unauthorized access. Reporting to: Manager- Cyber Defense Duty station: Head Office KEY ACCOUNTABILITIES: - Conduct vulnerability assessments and penetration testing on applications.
- Identify and remediate security weaknesses in application designs, code, and configurations. This is for both new implementations and for those undergoing changes.
- Collaborate with developers to integrate security into the Software Development Life Cycle (SDLC).
- Promote secure coding practices, such as input validation, encryption, and authentication mechanisms.
- Investigate and respond to application security incidents, such as breaches or malware infections.
- Perform root cause analysis and recommend preventative measures.
- Ensure applications comply with security standards (e.g., OWASP Top 10, ISO 27001, or PCI-DSS).
- Develop and enforce application security policies and guidelines.
- Deploy and manage tools like Web Application Firewalls (WAFs), Static and Dynamic Application Security Testing (SAST/DAST) tools, and runtime protection tools.
- Continuously monitor application activity for anomalies or suspicious behaviour.
- Educate developers and stakeholders on application security risks and best practices.
- Conduct workshops or create resources to build a security-first mindset within development teams.
- Work with cross-functional teams, including developers, DevOps, and BT teams, to address security issues.
- Communicate risks and solutions to both technical and non-technical stakeholders.
- Stay updated on emerging application security threats and technologies.
- Recommend and implement improvements to enhance application security posture.
Requirements KNOWLEDGE, SKILLS AND EXPERIENCE REQUIRED: cyber security role. - Work experience in the banking industry will be an added advantage.
- Experience and qualifications in Ethical Hacking.
- Working Knowledge of systems architecture and systems development.
- Knowledge and experience in Applications penetrations testing.
- Skills and training in internet applications design and security.
- Experience with Web Application Firewalls Proficiency in security technologies such as firewalls, intrusion detection systems, and encryption.
- Knowledge and Experience in Cyber Defense techniques and technologies.
- Experience in UNIX and Windows server administration is an added advantage.
- Technical skills in Unix and Windows and Python scripting skills.
- Demonstrate experience in writing technical reports and management reports for stakeholders is a must.
- Must possess above average problem-solving skills, organization skills, excellent and communication skills.
- Considered an out of the box thinker and displays a willingness to learn.
- Ability to maintain robust stakeholder engagements, a strong work ethic, and is a team player with the ability to work well independently.
- Experience with security frameworks and regulations such as PCI-DSS & ISO 27001.
- Ability to respond immediately to security incidents and provide post incident analysis.
- Ability to perform security systems testing both in-house and external systems before production deployment.
- The ability to educate employees on security best practices and promote a culture of security awareness.
- Advanced Business Architectural & IT Security skills.
- Analytical Thinking & Inductive Reasoning.
- Planning and Organization.
- Strategic Perspective – Establish priorities, challenging goals and measurements consistent with these goals and organizational vision.
- Critical Judgment and Decision-Making – Define issues and focus on achieving workable solutions to obstacles.
- Good Communicator – Presents ideas effectively, clearly and concisely both orally and in writing.
- Leadership and Interpersonal Skills – Create a culture of continuous development and ownership with self and the team.
- Inspire Commitment –Actions and behaviors are consistent with words.
- Self-Development – Pursues positive change in self and organization.
- Drives own personal development plan.
JOB-689bd0229c0ab Vacancy title:
IT Security Specialist- Applications Jobs at:
Q-Sourcing Deadline of this Job:
Monday, August 25 2025 Duty Station:
Uganda | Kampala | Uganda Summary
Date Posted: Tuesday, August 12 2025, Base Salary: Not Disclosed JOB DETAILS: Q-Sourcing Limited trading as Q-Sourcing Servtec is a manpower management solutions firm operating in the East African Region in the countries of Uganda, Kenya, Tanzania, Rwanda, and South Sudan. On behalf of our client in Uganda in the Banking Sector, we are looking for a competent and experienced Manager- Cyber Defense to work in Kampala Uganda. Purpose of the Role: Reporting to the Manager- Cyber Defense, the IT Security Specialist- Applications is responsible for ensuring the security and integrity of software applications by implementing, monitoring, and managing security measures to protect against vulnerabilities, threats, and unauthorized access. Reporting to: Manager- Cyber Defense Duty station: Head Office KEY ACCOUNTABILITIES: - Conduct vulnerability assessments and penetration testing on applications.
- Identify and remediate security weaknesses in application designs, code, and configurations. This is for both new implementations and for those undergoing changes.
- Collaborate with developers to integrate security into the Software Development Life Cycle (SDLC).
- Promote secure coding practices, such as input validation, encryption, and authentication mechanisms.
- Investigate and respond to application security incidents, such as breaches or malware infections.
- Perform root cause analysis and recommend preventative measures.
- Ensure applications comply with security standards (e.g., OWASP Top 10, ISO 27001, or PCI-DSS).
- Develop and enforce application security policies and guidelines.
- Deploy and manage tools like Web Application Firewalls (WAFs), Static and Dynamic Application Security Testing (SAST/DAST) tools, and runtime protection tools.
- Continuously monitor application activity for anomalies or suspicious behaviour.
- Educate developers and stakeholders on application security risks and best practices.
- Conduct workshops or create resources to build a security-first mindset within development teams.
- Work with cross-functional teams, including developers, DevOps, and BT teams, to address security issues.
- Communicate risks and solutions to both technical and non-technical stakeholders.
- Stay updated on emerging application security threats and technologies.
- Recommend and implement improvements to enhance application security posture.
Requirements KNOWLEDGE, SKILLS AND EXPERIENCE REQUIRED: cyber security role. - Work experience in the banking industry will be an added advantage.
- Experience and qualifications in Ethical Hacking.
- Working Knowledge of systems architecture and systems development.
- Knowledge and experience in Applications penetrations testing.
- Skills and training in internet applications design and security.
- Experience with Web Application Firewalls Proficiency in security technologies such as firewalls, intrusion detection systems, and encryption.
- Knowledge and Experience in Cyber Defense techniques and technologies.
- Experience in UNIX and Windows server administration is an added advantage.
- Technical skills in Unix and Windows and Python scripting skills.
- Demonstrate experience in writing technical reports and management reports for stakeholders is a must.
- Must possess above average problem-solving skills, organization skills, excellent and communication skills.
- Considered an out of the box thinker and displays a willingness to learn.
- Ability to maintain robust stakeholder engagements, a strong work ethic, and is a team player with the ability to work well independently.
- Experience with security frameworks and regulations such as PCI-DSS & ISO 27001.
- Ability to respond immediately to security incidents and provide post incident analysis.
- Ability to perform security systems testing both in-house and external systems before production deployment.
- The ability to educate employees on security best practices and promote a culture of security awareness.
- Advanced Business Architectural & IT Security skills.
- Analytical Thinking & Inductive Reasoning.
- Planning and Organization.
- Strategic Perspective – Establish priorities, challenging goals and measurements consistent with these goals and organizational vision.
- Critical Judgment and Decision-Making – Define issues and focus on achieving workable solutions to obstacles.
- Good Communicator – Presents ideas effectively, clearly and concisely both orally and in writing.
- Leadership and Interpersonal Skills – Create a culture of continuous development and ownership with self and the team.
- Inspire Commitment –Actions and behaviors are consistent with words.
- Self-Development – Pursues positive change in self and organization.
- Drives own personal development plan.
Work Hours: 8 Experience in Months: 12 Level of Education: bachelor degree Job application procedure Interested in applying for this job? Click here to submit your application now
|