Senior Security Engineer

Job Overview:

We are seeking a highly skilled Senior Security Engineer to join our team. In this role, you will focus on advanced penetration testing, integrating security into CI/CD pipelines, and managing network security measures. This position requires deep technical expertise and hands-on experience in cybersecurity practices, with an emphasis on problem-solving and proactive threat mitigation.

Key Responsibilities:

• Penetration Testing & Vulnerability Assessment:
• Conduct advanced penetration tests and vulnerability assessments using industry-standard tools (e.g., Nmap, Metasploit, Burp Suite, Wireshark).
• Analyze findings to identify critical vulnerabilities and recommend actionable remediation strategies.
• DevSecOps Integration:
• Collaborate with development and operations teams to integrate automated security testing tools into the CI/CD pipeline (e.g., Jenkins, GitLab CI/CD, Docker, Kubernetes).
• Ensure that security best practices and compliance standards are met during the software development lifecycle.
• Network Security Management:
• Implement and manage network security solutions including firewalls, IDS/IPS, VPNs, and encryption protocols.
• Monitor network traffic for unusual activity, respond to potential threats, and contribute to incident response efforts.
• Technical Expertise & Continuous Improvement:
• Stay up-to-date with emerging security threats, trends, and technologies.
• Participate in security audits, risk assessments, and contribute to the refinement of existing security policies and procedures.
• Collaboration & Mentoring:
• Work closely with cross-functional teams to provide technical guidance and share best practices on cybersecurity.
• Mentor junior team members on advanced security techniques and methodologies.

Qualifications & Requirements:

• Educational Background:
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Professional Experience:
• Minimum of 4 years’ experience in cybersecurity with a strong focus on penetration testing, DevSecOps, and network security.
• Proven hands-on experience in performing complex security assessments and implementing technical solutions.
• Technical Skills:
  Proficiency with penetration testing tools.
• Extensive experience in integrating security within CI/CD environments.
• Solid understanding of network security principles, including firewall configuration, IDS/IPS, VPN management, and encryption standards.
• Familiarity with security frameworks and standards (e.g., ISO/IEC 27001, PCI DSS).
• Certifications:
• Relevant certifications such as OSCP, CEH, or equivalent are preferred.
• Soft Skills:
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication skills, with the ability to explain complex technical concepts to diverse audiences.
• A proactive mindset and the ability to work both independently and as part of a collaborative team.