Security Engineer

About the role

We are looking for a seasoned Security Engineer to lead both Red Team and Blue Team initiatives. You will be responsible for securing our web and mobile applications, managing vulnerabilities throughout their lifecycle, and ensuring compliance with industry certifications.

Key responsibilities

• Perform penetration testing on web and mobile (iOS, Android, Windows, Mac) applications.
• Own the vulnerability management process from identification to remediation and reporting.
• Monitor and detect operational security risks across the organization.
• Conduct technical investigations of security incidents and tool performance.
• Collaborate with engineering and DevOps to embed security best practices into the SDLC.
• Automate vulnerability detection workflows and support threat modelling activities.
• Assist with security awareness training and implementation of controls for ISO 27001 and SOC Type 2 certifications.

Required profile

• Minimum 5 years of experience in application security testing and assessments.
• Strong understanding of OWASP Top 10, SANS Critical Security Controls, and general cybersecurity principles.
• Relevant certifications such as CISA, CISM, or CISSP are a plus.
• Excellent analytical abilities and a strong sense of ownership.
• Successful completion of a background check and NBI clearance.

Required skills

• Penetration testing tools: Burp Suite, OWASP ZAP, Metasploit.
• Static analysis tools: SonarQube, Ghidra, IDA.
• Programming languages: Java, JavaScript, C, C++.
• Scripting: Bash, PowerShell.
• Cloud platforms: AWS.
• Security information and event management (SIEM) technologies.
• Threat modelling, vulnerability management, and security automation.
• Knowledge of ISO 27001 and SOC Type 2 compliance requirements.