Security Engineer

About the role

The Security Engineer will own the security posture across the entire product ecosystem and infrastructure, acting as the primary guardian of systems, data, and applications. This role ensures robust protection against threats while enabling secure and compliant product development and operations.

Key responsibilities

• Design, implement, and maintain comprehensive security strategies for web applications, public‑facing websites, backend systems, and internal tools.
• Conduct regular security assessments, vulnerability scanning, penetration testing, code reviews, threat modeling and risk assessments.
• Build and maintain security monitoring, detection, and response capabilities (SIEM, EDR, log analysis, anomaly detection).
• Implement and enforce security best practices in CI/CD pipelines and manage identity, access control, secrets management, network security, and endpoint protection across multi‑cloud and on‑prem environments.
• Ensure compliance with standards such as GDPR, ISO 27001, SOC 2 and support internal and external audits.
• Collaborate with engineering, SRE, and product teams to embed security into the development lifecycle and produce security metrics, risk dashboards, and executive reports.

Required profile

• 5+ years of hands‑on cybersecurity experience, with at least 3 years in a senior role.
• Proven track record securing web applications, APIs, cloud environments, and CI/CD pipelines.
• Strong expertise across application, infrastructure, cloud, network security and incident response.
• Fluent English and strong analytical/problem‑solving abilities.

Required skills

• Burp Suite, OWASP ZAP, Nessus/OpenVAS, Splunk/ELK, Wazuh (SIEM/XDR).
• Programming/scripting in Python, Bash, PowerShell.
• CI/CD pipeline security, secure SDLC, SRE practices.
• Knowledge of GDPR, ISO 27001, SOC 2 compliance.
• Security certifications such as CISSP, OSCP, CISM (strong plus).