Security Engineer

About the role

The Security Engineer will join our security team to lead both Red‑Team and Blue‑Team initiatives. You will be responsible for protecting our web and mobile applications, managing vulnerabilities, and ensuring compliance with industry certifications.

Key responsibilities

• Perform penetration testing on Web and Mobile (iOS, Android, Windows, Mac) applications.
• Own the vulnerability management lifecycle from identification through remediation and reporting.
• Monitor and detect operational security risks across the organization.
• Conduct technical investigations on security incidents and evaluate security tools.
• Collaborate with engineering and DevOps to embed security best practices into the software development lifecycle.
• Automate vulnerability detection, review risks and patches, and facilitate threat modelling.
• Support security awareness training and implement controls for ISO 27001 and SOC 2 Type 2 certifications.

Required profile

• Minimum 5 years of experience in application security testing and assessments.
• Solid understanding of OWASP Top 10, SANS Critical Security Controls, and related standards.
• Relevant certifications such as CISA, CISM, or CISSP are a plus.
• Successful completion of background check and NBI clearance.

Required skills

• Penetration testing tools: Burp Suite, OWASP ZAP, Metasploit.
• Static analysis: SonarQube, Ghidra or IDA (optional).
• Programming languages: Java, JavaScript, C/C++.
• Scripting: Bash, PowerShell.
• Cloud platforms: AWS.
• Security monitoring: SIEM technologies.
• Threat modelling, vulnerability management, incident investigation.