Security Engineer

ResponsibilitiesInvolve in Red Team activities:Perform penetration testing of Web and Mobile (iOS, Android, Windows and Mac) applicationsOwn the vulnerability management lifecycle from identification, remediation to reportingActive monitoring and detection of operational security risks in the organizationConduct technical investigations on security incidents and toolsLiaise directly with users on security enquiries and concerns during Pre-sales and Support Conduct engagement with the Blue Team for the following:Work with engineering and DevOps teams to implement security best practicesImplement and improve workflows to automate vulnerability detection as part of the software development lifecycleReview risks and patches of software components used in the applicationsFacilitate threat modelling as part of the software development lifecycleHelp in security awareness trainingHelp in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2 QualificationsAt least 5 years of experience in application security testing and assessmentsSolid understanding of cybersecurity principles, standards and protocols such as OWASP Top 10 and SANS Critical Security ControlsExperience with application security tools as Burpsuite, OWASP ZAP, Metasploit, Sonarqube (experience with Ghidra or IDA is a plus)Experience with programming languages such as Java, JavaScript, C/C++Experience with scripting languages such as bash or PowershellExperience and knowledge of cloud solutions and architectures such as AWSExperience and knowledge of Security information and event management (SIEM) technologiesGood analytical skillsStrong sense of ownershipTechnical and industry certifications such as CISA, CISM, CISSP are a plus Hiring Condition: Successful completion of background checking will be required as a condition of hire.