Assignment description

We are looking for a Cyber Security Engineer.

In this role, you will promote secure coding practices through training and documentation, and review source code to identify vulnerabilities and provide actionable feedback. You will design and implement security architecture and controls for new and existing products.

You will perform security assessments such as threat modeling and attack surface analysis, and implement application security tools to automate security testing. You will support incident response related to application security, including root cause analysis and remediation. The role involves close collaboration with development, DevOps, and IT security teams, as well as monitoring security metrics and reporting on security posture and compliance.

To succeed in this role, you have strong written and verbal communication skills and can clearly explain complex security concepts to non-technical stakeholders.

Qualifications:

• You have experience working with programming languages such as C#, Rust, Python, or JavaScript.
• You have a strong understanding of application security principles and secure coding practices.
• You have solid knowledge of security concepts including network security, encryption, access management, and related best practices.
• You have hands-on experience with security tools and processes such as SAST, DAST, SCA, and vulnerability scanning (for example SonarQube, OWASP ZAP, Nessus, or Invicti).
• You have knowledge of established security frameworks and standards, such as OWASP Top Ten, NIST, IEC 62443, and ISO 27001.
• You have experience working with cloud platforms such as AWS, Azure, or Google Cloud, including their built-in security capabilities.
• You have hands-on experience with containerization and orchestration tools, including Docker and Kubernetes.
• You have relevant certifications such as CEH, CISSP, or OSCP, which are considered a plus.