Information Security Professional

Responsibilities

• Review security architecture for new systems and create comprehensive security test plans.
• Perform multi-layer security analysis across applications, APIs, operating systems, and databases.
• Conduct manual vulnerability assessments, source code reviews (SAST/SCA), and automated scans.
• Execute security testing for cloud-based solutions, M365 platforms, and mobile applications (iOS/Android).
• Perform AI security testing and assess AI-related security controls.
• Collaborate with development teams to remediate identified vulnerabilities using a risk-based approach.
• Maintain detailed documentation of all test procedures and findings within the ticketing system.
• Stay updated on emerging trends in AI and application security testing tools.

Requirements

• Associate's degree or a recognized professional certificate.
• Minimum of 2 years of relevant experience in information security.
• In-depth knowledge of OWASP Top 10 vulnerabilities for web, API, mobile, and LLMs.
• Hands-on experience with web application security manual testing and source code review.
• Understanding of the Agile framework and its application in security testing environments.

Preferred Qualifications

• Experience with cloud technologies such as AWS, Microsoft Azure, and Office 365.
• Familiarity with web technologies like Java, .NET, and Drupal, and web servers like IIS or Apache.
• Experience in mobile application security testing for both iOS and Android platforms.
• Relevant industry certifications such as CEH, CPTS, AZ-500, CISSP, or GIAC.

About the Company

The World Bank Group is a unique global partnership of five institutions dedicated to ending extreme poverty, increasing shared prosperity, and promoting sustainable development. With 189 member countries and over 130 offices worldwide, we invest in groundbreaking projects and use data, research, and technology to develop solutions to the most urgent global challenges.