Senior Cyber Security Engineer / DevSecOps

About the role

This senior position blends offensive exploitation with defensive engineering, embedding the professional within product, engineering, and infrastructure teams. You will champion security architecture from the ground up and drive security throughout the software development lifecycle.

Key responsibilities

• Collaborate with product and engineering teams to review and improve security of new features.
• Drive Secure SDLC, define security acceptance criteria, and conduct threat modeling.
• Perform pre‑deployment and post‑deployment penetration tests for web, mobile, and cloud assets.
• Lead red‑team activities with infrastructure teams and define infrastructure security measures.
• Maintain and expand the security roadmap, assess and integrate security tools.
• Manage incident response, vulnerability research, bug‑bounty program, and security logging/monitoring.
• Mentor security team members and support company‑wide security awareness.

Required profile

• Bachelor’s degree in Computer Science, Software Engineering or equivalent experience.
• Minimum 5 years of hands‑on application or infrastructure penetration testing.
• Proven experience in security code reviews and ability to communicate technical concepts to all stakeholders.
• Strong understanding of cloud platforms, containerization, networking, and security operations.

Required skills

• Python
• AWS, Azure, GCP
• Docker, Kubernetes, serverless/Lambda
• Git version control
• Fortinet (network security)
• SIEM solutions
• EDR, IDS, CSPM, CWPP
• Penetration testing and red‑team techniques
• Security code review
• Vulnerability management
• Bug‑bounty program administration
• Security logging and monitoring
• Incident response