Security Engineer

About the Role

We are looking for a Software Engineer Product Security to join our security team. The role involves ensuring product security across the software development lifecycle, performing penetration testing, automating security processes, and integrating secure coding practices. You will work closely with engineering teams to identify, mitigate, and automate security controls while enabling scalable and secure product development.

Key Responsibilities

• Conduct security assessments and penetration testing of applications and services.
• Identify, analyze, and remediate vulnerabilities across products.
• Implement and automate security checks within CI/CD pipelines.
• Collaborate with development teams to integrate secure coding practices.
• Monitor, analyze, and enhance the security posture of products using industry-standard tools.
• Stay updated on the latest security trends, vulnerabilities, and exploits.

Required Skills & Qualifications

• Strong knowledge of Cybersecurity concepts and OWASP Top 10.
• Hands-on experience with penetration testing and vulnerability assessment.
• Programming skills in Python and/or Java for automation and tooling.
• Good understanding of SQL and common database security issues.
• Experience in automation of security tasks in DevOps/CI-CD environments.

Security Tools Expertise

Nmap network scanning and reconnaissance

Burp Suite – web application security testing

OWASP ZAP – automated vulnerability scanning

Nice to Have

• Experience in threat modeling and secure design reviews.
• Familiarity with container security (Docker, Kubernetes).
• Knowledge of cloud security (AWS / Azure / GCP).