{"id":3729367,"url":"https://alion.io/job/samaha-consulting-security-assurance-expert","title":"Security Assurance Expert","company":{"id":4496133,"name":"Samaha Consulting","domain":null,"url":"https://alion.io/company/samaha-consulting","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CVSS","optional":false},{"name":"Fortify","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Postman","optional":false},{"name":"SonarQube","optional":false}],"status":"closed","first_seen_at":"2026-10-20T11:01:04Z","employer_posted_date":null,"last_verified_at":"2026-11-09T07:04:46Z","board_verified":false,"closed_at":"2026-11-09T07:04:46Z","days_open":19,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":19},"description":"Introduction\nThe Security Assurance Expert will be responsible for strengthening MTN’s overall security posture through continuous penetration testing, API security assessments, cloud security posture management, DevSecOps implementation, vulnerability management, and compliance assessments. The role will work closely with security, development, and DevOps teams to embed security controls into CI/CD pipelines, identify and remediate vulnerabilities, validate fixes, and ensure alignment with ISO 27001, NIST, CIS Benchmarks, and PCI DSS.\n\nDuties & Responsibilities\n\n Perform continuous penetration testing across production and staging environments.\n\n Conduct security assessments of web applications, cloud-native services, APIs, and internal/public-facing applications.\n\n Perform dedicated API security testing covering authentication, authorization, injection, rate limiting, data exposure, and OWASP API Security Top 10.\n\n Identify, document, and report vulnerabilities with CVSS ratings, business impact, remediation recommendations, and PoC evidence.\n\n Conduct retesting and validation of remediated vulnerabilities.\n\n Design and implement DevSecOps security practices across development and CI/CD pipelines.\n\n Integrate security gates and controls into CI/CD workflows.\n\n Implement and support SAST, DAST, and SCA using tools such as SonarQube and Fortify.\n\n Conduct cloud security posture assessments across cloud subscriptions.\n\n Identify cloud misconfigurations, insecure practices, and compliance gaps using Microsoft Defender for Cloud, CSPM, or similar tools.\n\n Perform threat modelling, risk assessments, security posture assessments, and gap analyses.\n\n Assess security controls against ISO 27001, NIST Cybersecurity Framework, CIS Benchmarks, and PCI DSS.\n\n Develop remediation roadmaps with priorities, timelines, and resource requirements.\n\n Work with development, DevOps, and security teams to triage, prioritize, and remediate vulnerabilities.\n\n Prepare monthly cloud security posture and remediation reports.\n\n Prepare quarterly penetration testing and API security reports.\n\nDesired Experience & Qualification\n\n 3–7+ years of relevant cybersecurity/security assurance experience, ideally with hands-on application, cloud, and DevSecOps security.\n\n Proven experience in penetration testing and vulnerability assessment.\n\n Strong experience with API security testing and OWASP API Security Top 10.\n\n Hands-on experience with Burp Suite Pro, OWASP ZAP, Postman, or similar security testing tools.\n\n Practical experience implementing DevSecOps and CI/CD security controls.\n\n Experience with SAST, DAST, and SCA tools such as SonarQube, Fortify, or equivalent.\n\n Experience conducting cloud security assessments and identifying cloud misconfigurations.\n\n Knowledge of Microsoft Defender for Cloud, CSPM, or equivalent cloud security platforms.\n\n Experience with threat modelling, risk assessment, vulnerability management, and remediation validation.\n\n Good understanding of ISO 27001, NIST CSF, CIS Benchmarks, and PCI DSS.\n\n Ability to produce professional security assessment, penetration testing, gap analysis, and remediation reports.\n\n Strong collaboration skills with DevOps, developers, security teams, and business stakeholders.","description_format":"text","description_chars":3258,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-11-04T06:57:20Z"},{"event":"close","at":"2026-11-09T07:04:46Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/samaha-consulting-security-assurance-expert","json_url":"https://alion.io/job/samaha-consulting-security-assurance-expert.json","meta":{"generated_at":"2026-11-10T06:07:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14218,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4496133},"rest":"https://alion.io/mcp/rest/get_company?id=4496133"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsamaha-consulting-security-assurance-expert"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsamaha-consulting-security-assurance-expert"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsamaha-consulting-security-assurance-expert"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/samaha-consulting-security-assurance-expert\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsamaha-consulting-security-assurance-expert"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3729367}},{"tool":"search_jobs","arguments":{"company":4496133,"detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3729367},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}