Senior Security Engineer

Job summary

The organization is looking for a Senior Security Engineer to enhance its security posture by establishing a DevSecOps function and refining security processes. This role is crucial for protecting infrastructure in both on-premises and cloud environments while advancing threat detection and response capabilities.

Qualifications

• Relevant education in software engineering, computer science, cyber security, or a related technical field.
• Hands-on experience as a software engineer or in a similar engineering role, with a solid understanding of development environments, CI/CD pipelines, repositories, cloud services, automation, and developer workflows.
• Background in IT Security, DevSecOps, application security, cloud security, vulnerability management, or another security-adjacent role is required.
• Experience communicating risk evaluations, remediation priorities, and security trade-offs to both technical teams and non-technical stakeholders.
• Professional English proficiency is a must.

Responsibilities

• Build and maintain DevSecOps standards, patterns, and technical documentation.
• Implement automated security controls such as dependency scanning, secret detection, application security testing, container and image scanning, and policy-as-code checks.
• Partner with software engineers and platform teams to integrate security into existing workflows.
• Track and communicate findings from development tooling and external attack surface management.
• Translate complex security risks into practical recommendations for technical and non-technical stakeholders.
• Combine hands-on engineering with cyber security ownership, using lessons learned from incidents and vulnerabilities to strengthen preventive controls.

Skills

• Strong engineering mindset combined with a natural curiosity and practical risk judgment.
• Ability to collaborate across software development, platform engineering, cloud, infrastructure, and Cyber Security.
• Ability to turn complex security requirements into simple, automated controls that developers will adopt.

Education

• Relevant education in software engineering, computer science, cyber security, or a related technical field.

Tools

• Familiarity with modern security tools and practices related to DevSecOps and cloud security.