Cyber Security Assurance Tech Lead

• Perform penetration testing activities on web applications, mobile applications, networks, APIs, and cloud environments to identify security vulnerabilities and weaknesses
• Support penetration testing activities conducted internally or through third-party vendors, ensuring proper execution and reporting
• Conduct vulnerability assessments and security analysis, providing remediation recommendations to improve the overall security posture
• Validate secure implementation and acceptance of new technologies, systems, and infrastructure in alignment with Vodafone security policies and standards
• Perform regular security assurance activities on existing applications and environments to ensure continuous compliance and protection against emerging threats
• Participate in security risk assessments for new projects and initiatives, ensuring security risks are identified and mitigated during early project phases
• Collaborate with technical teams and business stakeholders to track and remediate penetration testing findings in a timely manner
• Review and validate penetration testing reports, ensuring findings are properly documented with clear remediation guidance
• Stay up to date with emerging cyber threats, vulnerabilities, attack techniques, and industry best practices to continuously improve penetration testing and security assurance capabilities

• Strong knowledge of security frameworks and methodologies such as MITRE ATT&CK, NIST, OWASP, and CIS Controls
• Hands-on understanding of penetration testing methodologies for web, mobile, network, API, and cloud environments
• Familiarity with hardening and secure configuration practices for servers, databases, operating systems, and applications
• Experience in vulnerability assessment, risk analysis, and providing security recommendations aligned with business requirements
• Ability to work collaboratively with cross-functional teams to identify, prioritize, and remediate security vulnerabilities
• Strong analytical, troubleshooting, and problem-solving skills with the ability to communicate technical findings to both technical and non-technical stakeholders

Relevant certifications are considered a plus (OSCP, eWPTX, eCPPT, CEH, PNPT, or similar)