Security Engineer

About the role

The Security Engineer will lead both Red Team and Blue Team activities, ensuring robust application security across web and mobile platforms while supporting pre‑sales and ongoing security enquiries.

Key responsibilities

• Perform penetration testing of web and mobile (iOS, Android, Windows, Mac) applications.
• Own the vulnerability management lifecycle from identification through remediation and reporting.
• Monitor and detect operational security risks and conduct technical investigations on incidents.
• Collaborate with engineering and DevOps to embed security best practices and automate vulnerability detection in the SDLC.
• Review risks and patches for software components and facilitate threat modelling.
• Support security awareness training and implement controls for certifications such as ISO 27001 and SOC Type 2.

Required profile

• At least 5 years of experience in application security testing and assessments.
• Strong understanding of OWASP Top 10, SANS Critical Security Controls, and security standards.
• Relevant certifications (CISA, CISM, CISSP) are a plus.
• Successful completion of background check and NBI clearance.

Required skills

• Penetration testing tools: BurpSuite, OWASP ZAP, Metasploit, SonarQube (plus Ghidra or IDA).
• Programming languages: Java, JavaScript, C/C++.
• Scripting: Bash, PowerShell.
• Cloud: AWS.
• SIEM technologies.