Graduate Trainee – Information Security

About the role

The Graduate Trainee – Information Security will support the implementation and continuous improvement of the organisation's information security programme. This role offers practical exposure to protecting confidentiality, integrity and availability of digital financial services and technology infrastructure.

Key responsibilities

• Assist in monitoring security alerts from SIEM, EDR, firewalls and other tools, and support incident investigation and escalation.
• Help conduct static, dynamic, composition and interactive application security testing, vulnerability assessments and penetration testing of web, API and mobile applications.
• Support information security risk assessments, third‑party due diligence, IT controls validation and compliance reviews.
• Contribute to staff security awareness initiatives, phishing simulations and data protection practices.
• Participate in security testing of new systems, document defects and support user acceptance testing and release readiness.
• Prepare periodic security activity reports, dashboards and maintain records for audits and regulatory reviews.

Required profile

• Bachelor's degree in Computer Science, IT, Cybersecurity or related field; recent graduate or candidate with limited experience.
• Basic understanding of information security principles, networking, operating systems and common cyber threats.
• Familiarity with OWASP Top 10, DevSecOps concepts and security testing tools.

Required skills

• SIEM, EDR, NDR, SOAR, SOC concepts
• SAST, DAST, SCA, IAST tools (e.g., Burp Suite, Black Duck, Corgea, Frida, MobSF, Snyk)
• Web application security knowledge (OWASP Top 10)
• QA tools such as Postman, JMeter, Locust, Selenium
• Basic scripting/programming in Python, PowerShell or Bash