Security Engineer

Key Responsibilities

• Provide security techniques and expertise to ensure the infrastructure and software services meet specific customer security requirements/certifications
• Collaborate with members of the team and product owners to solve operational issues and develop enhancements such as automation.
• Ensure applications stay compliant by integrating application and Security processes and CI/CD pipelines from early stages of the lifecycle.
• Collaborate with team members on continuous improvement to both the Security pipelines and processes, and to the Information Security tools, services, and processes.
• Understand technical and business requirements to develop tactical and strategic roadmaps to address and implement Secure SDLC controls (Data Privacy, SAST, DAST, etc).

Job Requirements

• Bachelor Degree in information security, computer science.
• 3+ years of experience working in a Security role handling on premise and cloud infrastructures. Priority is given to having experience working in the financial industry, Fintech.
• Priority is given professional certifications, such as CISSP, CSSLP, GIAC, CEH, or willingness to obtain.
• Experience with security testing at scale by building and implementing static and dynamic analysis tools, integrating security into CI/CD workflows for everyday deployments.
• Experience with vulnerability scanners, including Tenable Nessus, Qualys, …
• Knowledge of threat modeling, risk assessment techniques, code reviews, and with the latest security best practices
• Require knowledge of CI/CD tools - Knowledge of GitLab CI/CD, Seleneoid, Jmeter, SoapUI, Junit
• Require good knowledge in automatic configuration management tool
• Require good knowledge of automated security tools - SAST, SCA, DAST, IAST
• Public Cloud services knowledge: AWS, Digital Ocean.
• Knowledge of Logging & Monitoring tools: ELK, Grafana, DataDog, Prometheus.