Cyber Security Engineer – Secure Payment Platforms

About the role

We are looking for a Cyber Security Engineer to protect Modupay’s payment platforms, customer data and internal systems from cyber‑attacks. You will design and implement security controls, detect gaps and respond to incidents across web, API, cloud and mobile environments.

Key responsibilities

• Develop, maintain and enhance information security policies, standards, procedures and secure configuration baselines.
• Plan, execute and coordinate vulnerability assessments and penetration tests for internal, external, web, API, cloud and mobile assets, and track remediation to closure.
• Perform security testing activities including reconnaissance, validation, exploitation within approved scope, reporting and retesting of remediated issues.
• Create and distribute incident response, escalation and breach‑handling procedures and support investigations of security events.
• Monitor security alerts, threat intelligence and attack trends, and communicate actionable risk information to technical and business stakeholders.
• Conduct control reviews to ensure compliance with security policies, operational procedures and secure development practices.
• Support compliance with Egyptian data‑protection regulations, NTRA cybersecurity obligations, PCI DSS and Central Bank of Egypt expectations.
• Collaborate with IT, engineering, product teams and third‑party providers to remediate vulnerabilities and improve the overall security posture.

Required profile

• Bachelor’s degree in Computer Science, Information Systems or Engineering.
• Strong understanding of operating systems, networks, web technologies, databases, authentication and enterprise architectures.
• Hands‑on experience performing penetration testing and vulnerability assessments using recognized methodologies.
• Familiarity with the Egyptian payments and digital banking regulatory landscape.

Required skills

• Penetration testing and vulnerability assessment.
• Security operations tools such as SIEM, DLP and EDR.
• Incident response, threat hunting and perimeter defense.
• Web, API, network, cloud, Active Directory and mobile security testing.
• Threat modeling, kill‑chain analysis and knowledge of adversary tactics, techniques and procedures.
• Security policy development, secure configuration baselines and security monitoring.