Description

As a Security Engineer, you will play a crucial role in managing risks and enhancing security practices. Your day-to-day responsibilities will involve designing security products, responding to alerts, and collaborating with teams to ensure a secure digital environment.

Requirements

• •Interest and passion in security
• •More than two years of working experience as a Security Engineer
• •Hands-on experience with AWS and secure architecture
• •Strong knowledge of common attack vectors and defence strategies
• •Experience designing and building security products leveraging open-source solutions
• •Experience partnering with software engineers for security guidance
• •Deep understanding of SAST and code security controls
• •Proficiency with at least one programming language (preferably Python)
• •Experience with AWS, CDK, ECS, Docker, GitHub, SonarQube, Okta, Python tools, OAuth and OpenID
• •Enjoy working with Unix environments and command-line tools
• •Experience using AI and GenAI to improve productivity
• •Proactive approach to exploring and adopting AI tools
• •Understanding of emerging AI-related threats
• •Enjoy solving large-scale, complex challenges
• •Take ownership of solutions from idea to production
• •Pragmatic balance of short- and long-term priorities
• •Comfortable with ambiguity and open-ended problems
• •Customer first mindset and improving developer experience
• •Making systems incrementally better
• •Pragmatic view of GenAI and its limitations

Tasks

• •Own end-to-end risk management
• •Identify areas of risk and assess the environment
• •Validate the presence of risks
• •Build detective and preventive controls
• •Track risks in the risk registry
• •Partner with teams to mitigate issues
• •Design and build security products
• •Ensure alignment with infrastructure strategy
• •Integrate security into the software development lifecycle
• •Define and improve security best practices
• •Lead initiatives for company-wide adoption of best practices
• •Promote security products and support teams in their application
• •Be responsible for multiple technical areas or processes
• •Lead technical discussions and improvements
• •Participate in on-call rotation and 'cop of the day' duties
• •Triage and respond to security alerts
• •Support user requests and monitor tools for errors
• •Coordinate with engineering teams as needed
• •Implement security compliance controls for SOC 2 and PCI
• •Support the GRC team in compliance efforts
• •Investigate and remediate security incidents
• •Occasionally serve as the incident commander

Tools & Technologies