About the Security Engineer role:

Involved In Red Team Activities

Perform penetration testing of Web and Mobile (iOS, Android, Windows, and Mac) applications

Own the vulnerability management lifecycle from identification, remediation to reporting

Active monitoring and detection of operational security risks in the organization

Conduct technical investigations on security incidents and tools

Liaise directly with users on security enquiries and concerns during Pre-sales and Support

Conduct Engagement With The Blue Team For The Following

Work with engineering and DevOps teams to implement security best practices

Implement and improve workflows to automate vulnerability detection as part of the software development lifecycle

Review risks and patches of software components used in the applications

Facilitate threat modelling as part of the software development lifecycle

Help in security awareness training

Help in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2

At least 5 years of experience in application security testing and assessments

Solid understanding of cybersecurity principles, standards, and protocols such as OWASP Top 10 and SANS Critical Security Controls

Experience with application security tools such as Burpsuite, OWASP ZAP, Metasploit, SonarQube (experience with Ghidra or IDA is a plus)

Experience with programming languages such as Java, JavaScript, C/C++

Experience with scripting languages such as Bash or PowerShell

Experience and knowledge of cloud solutions and architectures such as AWS

Experience and knowledge of Security Information and Event Management (SIEM) technologies

Security Engineer

Explore more