Security Engineer
Security Engineer
Convene- Posted 4 days ago
- Be among the first 10 applicants
Job Description
Responsibilities
About the Security Engineer role:
Involved In Red Team Activities
Perform penetration testing of Web and Mobile (iOS, Android, Windows, and Mac) applications
Own the vulnerability management lifecycle from identification, remediation to reporting
Active monitoring and detection of operational security risks in the organization
Conduct technical investigations on security incidents and tools
Liaise directly with users on security enquiries and concerns during Pre-sales and Support
Conduct Engagement With The Blue Team For The Following
Work with engineering and DevOps teams to implement security best practices
Implement and improve workflows to automate vulnerability detection as part of the software development lifecycle
Review risks and patches of software components used in the applications
Facilitate threat modelling as part of the software development lifecycle
Help in security awareness training
Help in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2
Qualifications
At least 5 years of experience in application security testing and assessments
Solid understanding of cybersecurity principles, standards, and protocols such as OWASP Top 10 and SANS Critical Security Controls
Experience with application security tools such as Burpsuite, OWASP ZAP, Metasploit, SonarQube (experience with Ghidra or IDA is a plus)
Experience with programming languages such as Java, JavaScript, C/C++
Experience with scripting languages such as Bash or PowerShell
Experience and knowledge of cloud solutions and architectures such as AWS
Experience and knowledge of Security Information and Event Management (SIEM) technologies
Good analytical skills
Strong sense of ownership
Technical and industry certifications such as CISA, CISM, CISSP are a plus
Others
Successful completion of background check and NBI clearance will be required.
About the Security Engineer role:
Involved In Red Team Activities
Perform penetration testing of Web and Mobile (iOS, Android, Windows, and Mac) applications
Own the vulnerability management lifecycle from identification, remediation to reporting
Active monitoring and detection of operational security risks in the organization
Conduct technical investigations on security incidents and tools
Liaise directly with users on security enquiries and concerns during Pre-sales and Support
Conduct Engagement With The Blue Team For The Following
Work with engineering and DevOps teams to implement security best practices
Implement and improve workflows to automate vulnerability detection as part of the software development lifecycle
Review risks and patches of software components used in the applications
Facilitate threat modelling as part of the software development lifecycle
Help in security awareness training
Help in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2
Qualifications
At least 5 years of experience in application security testing and assessments
Solid understanding of cybersecurity principles, standards, and protocols such as OWASP Top 10 and SANS Critical Security Controls
Experience with application security tools such as Burpsuite, OWASP ZAP, Metasploit, SonarQube (experience with Ghidra or IDA is a plus)
Experience with programming languages such as Java, JavaScript, C/C++
Experience with scripting languages such as Bash or PowerShell
Experience and knowledge of cloud solutions and architectures such as AWS
Experience and knowledge of Security Information and Event Management (SIEM) technologies
Good analytical skills
Strong sense of ownership
Technical and industry certifications such as CISA, CISM, CISSP are a plus
Others
Successful completion of background check and NBI clearance will be required.
More Info
Key Skills
SANS Critical Security Controls
SIEM technologies
OWASP ZAP
cybersecurity principles
Ghidra
About Company
Skills:
.NET, Pci Dss, PowerShell, Soc, Sql, Iso 27001, Azure Ad, Sailpoint, Iam, Saviynt, Microsoft Entra ID, IGA, JML lifecycle, Active Directory, least privilege access, rbac, One Identity Manager, entitlement analysis, cybersecurity principles, compliance frameworks
Skills:
AWS EKS, Bash, Terraform, Helm, Kubernetes, Python, Cisco Secure Workload, Aqua, Prisma Cloud, NetworkPolicies, Kustomize, Go, Istio, GCP GKE, Cilium, Calico, Azure AKS, Falco, Sysdig, Trivy
Skills:
Kali Linux, Burp Suite, Metasploit, mobile security testing
Skills:
Data Loss Prevention (DLP), security automation , Gdpr, Logging, CSPM, Encryption, Iso 27001, Iam, Siem, Waf, PAM, Azure, AWS, MFA, CWPP, Kona Site Defender, Prolexic Bot Manager, Akamai security solutions, rbac, EDR, nist, hybrid cloud environments
Skills:
Oauth, Servicenow, Jira, Sso, Terraform, Databricks, Splunk, Azure, Python, AWS, Databricks REST API, Unity Catalog, SCIM