Senior Security Engineer

Job Overview:
We are seeking a highly skilled Senior Security Engineer to join our team. In this role, you will focus on advanced penetration testing, integrating security into CI/CD pipelines, and managing network security measures. This position requires deep technical expertise and hands-on experience in cybersecurity practices, with an emphasis on problem-solving and proactive threat mitigation.
Key Responsibilities:
Penetration Testing & Vulnerability Assessment:
Conduct advanced penetration tests and vulnerability assessments using industry-standard tools (e.g., Nmap, Metasploit, Burp Suite, Wireshark).
Analyze findings to identify critical vulnerabilities and recommend actionable remediation strategies.
DevSecOps Integration:
Collaborate with development and operations teams to integrate automated security testing tools into the CI/CD pipeline (e.g., Jenkins, GitLab CI/CD, Docker, Kubernetes).
Ensure that security best practices and compliance standards are met during the software development lifecycle.
Network Security Management:
Implement and manage network security solutions including firewalls, IDS/IPS, VPNs, and encryption protocols.
Monitor network traffic for unusual activity, respond to potential threats, and contribute to incident response efforts.
Technical Expertise & Continuous Improvement:
Stay up-to-date with emerging security threats, trends, and technologies.
Participate in security audits, risk assessments, and contribute to the refinement of existing security policies and procedures.
Collaboration & Mentoring:
Work closely with cross-functional teams to provide technical guidance and share best practices on cybersecurity.
Mentor junior team members on advanced security techniques and methodologies.

Qualifications & Requirements:
Educational Background:
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Professional Experience:
Minimum of 4 years’ experience in cybersecurity with a strong focus on penetration testing, DevSecOps, and network security.
Proven hands-on experience in performing complex security assessments and implementing technical solutions.
Technical Skills:Proficiency with penetration testing tools.
Extensive experience in integrating security within CI/CD environments.
Solid understanding of network security principles, including firewall configuration, IDS/IPS, VPN management, and encryption standards.
Familiarity with security frameworks and standards (e.g., ISO/IEC 27001, PCI DSS).
Certifications:
Relevant certifications such as OSCP, CEH, or equivalent are preferred.
Soft Skills:
Strong analytical and problem-solving skills with attention to detail.
Excellent communication skills, with the ability to explain complex technical concepts to diverse audiences.
A proactive mindset and the ability to work both independently and as part of a collaborative team.