- Good understanding of network protocols, design and operations

- Participate in Security Assessments of networks, systems and applications.

- Demonstrated ability to work on multiple projects simultaneously and to work in a highly dynamic, rapidly changing environment.

- Hands-on experience with commercial and open-source network and application security testing tools

- Experience testing web applications for common web application security vulnerabilities as defined by OWASP including input validation vulnerabilities, broken access controls, session management vulnerabilities, cross-site scripting issues, SQL injection and web server configuration issues.

- Proven ability to communicate technical issues to technical and non-technical business area representatives.

- Monitor and proactively report on current threats and vulnerabilities to application security

- Coordinate escalations and collaborate with internal & External technology teams to ensure timely resolution of issues

- Respond to incidents and events from a variety of sources

- Ensure compliance with organization policies and assist with the development of Information Security policies, procedures and related guidelines

- Carry-out a planned web applications assessment for Services and infrastructure components

- Participate in the audit process of Orange Jordan security policies.

- Hands on experience on most security assessment tools 

- knowledgeable in best security and technology practices, trends and tools

- Working knowledge of common commercial and/or open source vulnerability assessment tools and techniques used for evaluating network, operating systems, databases and web applications

- Understanding of various web application architectures

- Understanding of server and client side application development

- Expert in Security configuration Audits and Benchmarks (CIS)

- Scripting and client side technologies: Python ,Shell ,Java script, HTML, XML.

- Experience in PTF,OSSTM and OWASP. 

- Implementation of the latest security assessment techniques to identify network and infrastructure vulnerabilities and provide enterprises customers with latest security findings embedded with expert fixes and recommendations, to fit the customers’ internal and external security-operational needs. 

- Implement PKI ,Digital Signing ,SSL encryption and tokenization

- Defend OJ networks against DDoS attacks, and support in offering DDoS services to the corporate customers.

- Profound hands-on & job knowledge (Secure code development & programming: PHP, O.O Programming, MVC Design patterns, Java EE(Both server & client), WebSphere middleware(Portal, Portlets, Application Server, Commerce server, Integration Developer, Process Server

- Actively build credibility with corporate customers’ in order to be viewed as a trusted team player while performing IT Security assessments, analysis, penetration testing, PCI DSS and SANS compliance, networks architecture security design, ethical hacking, security audits, service/product implementation management, mentoring the remediation cycle, and training.

- Secure design, implementation, audit, and assessment of complex multi-layered security solutions based on the integration of different leading products, and standards; i.e. Firewalls, Authentication Software, Encryption, NAC, IDBN, ICT, IDS/IPS,SDN, PKI and monitoring Tools

- Engage in advanced security technology discussions with corporate customers’ through the Security Operations Directorat