Cyber Security Engineer

About the role

EYouth is seeking a Cyber Security Engineer to protect its end‑to‑end digital ecosystem. You will work across code, infrastructure, CI/CD pipelines, AWS services, authentication, and data‑privacy layers to ensure secure development and deployment.

Key responsibilities

• Perform secure code reviews for backend, frontend, mobile, and AI‑related components, focusing on Django/DRF APIs, serializers, and permission logic.
• Audit CI/CD pipelines for exposed secrets, missing security gates, and weak access controls.
• Assess AWS infrastructure (S3, CloudFront, IAM, RDS/PostgreSQL, Redis/ElastiCache, ALB, Security Groups) for configuration weaknesses.
• Evaluate file‑transfer flows, signed URLs, and data‑leakage risks.
• Review authentication, session handling, JWT management, and role‑based permissions.
• Identify frontend and mobile security issues such as XSS, insecure token storage, and unsafe API interceptors.
• Analyze AI‑related threats, including prompt injection and PII leakage.
• Conduct vulnerability assessments, pre‑release security audits, and produce detailed remediation reports.

Required profile

• Minimum 3 years of experience in application security, cloud security, or security‑focused software engineering.
• Strong knowledge of OWASP Top 10, authentication, authorization, and session security.
• Hands‑on experience reviewing CI/CD pipelines and AWS security services.
• Ability to communicate findings clearly with severity, impact, and remediation steps.

Required skills

• Python
• AWS (IAM, S3, CloudFront, RDS/PostgreSQL, ElastiCache, ALB, Security Groups)
• Django & Django Rest Framework
• PostgreSQL
• Redis
• CI/CD pipelines & Git workflows
• API security & Application Security
• Cloud Security
• Secure Code Review
• Common web vulnerabilities (OWASP Top 10)
• Mobile Security