Security Engineer

<h2>About the Security Engineer role:</h2><h2>Responsibilities</h2><h2>Involved in Red Team activities:</h2><ul>
<li>Perform penetration testing of Web and Mobile (iOS, Android, Windows, and Mac) applications</li>
<li>Own the vulnerability management lifecycle from identification, remediation to reporting</li>
<li>Active monitoring and detection of operational security risks in the organization</li>
<li>Conduct technical investigations on security incidents and tools</li>
<li>Liaise directly with users on security enquiries and concerns during Pre-sales and Support</li>
</ul><h2>Conduct engagement with the Blue Team for the following:</h2><ul>
<li>Work with engineering and DevOps teams to implement security best practices</li>
<li>Implement and improve workflows to automate vulnerability detection as part of the software development lifecycle</li>
<li>Review risks and patches of software components used in the applications</li>
<li>Facilitate threat modelling as part of the software development lifecycle</li>
<li>Help in security awareness training</li>
<li>Help in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2</li>
</ul><h2>Requirements</h2><h2>Qualifications</h2><ul>
<li>At least 5 years of experience in application security testing and assessments</li>
<li>Solid understanding of cybersecurity principles, standards, and protocols such as OWASP Top 10 and SANS Critical Security Controls</li>
<li>Experience with application security tools such as Burpsuite, OWASP ZAP, Metasploit, SonarQube (experience with Ghidra or IDA is a plus)</li>
<li>Experience with programming languages such as Java, JavaScript, C/C++</li>
<li>Experience with scripting languages such as Bash or PowerShell</li>
<li>Experience and knowledge of cloud solutions and architectures such as AWS</li>
<li>Experience and knowledge of Security Information and Event Management (SIEM) technologies</li>
<li>Good analytical skills</li>
<li>Strong sense of ownership</li>
<li>Technical and industry certifications such as CISA, CISM, CISSP are a plus</li>
</ul><h2>Others:</h2><ul><li>Successful completion of background check and NBI clearance will be required.</li></ul>