Senior Security Engineer (m/f/d)

About the role

We are looking for an experienced Senior Security Engineer to lead and enhance security practices across application, infrastructure, and cloud environments in a highly regulated financial services setting. The role focuses on embedding secure‑by‑design principles throughout the software development lifecycle and driving DevSecOps initiatives.

Key responsibilities

• Conduct web, mobile, and API penetration testing and vulnerability assessments.
• Perform secure code reviews and identify security weaknesses in applications and infrastructure.
• Manage and optimise security tooling such as SAST, DAST, SCA, IaC security and container security solutions.
• Integrate security controls into CI/CD pipelines and lead DevSecOps programmes.
• Execute threat modelling, risk assessments, and security architecture reviews.
• Design and review secure solutions for cloud, Kubernetes, Docker, and micro‑services environments.
• Lead vulnerability management, remediation planning and tracking.
• Support incident investigations, root‑cause analysis and remediation.
• Deliver security awareness and secure coding training to engineering teams.

Required profile

• 8–15 years of experience in information security, cyber security or security engineering.
• Proven ability to work with development, DevOps, infrastructure and product teams.
• Strong stakeholder management and communication skills.
• Experience in a regulated financial services environment is a plus.

Required skills

• Web Application Penetration Testing, API Security Testing, Mobile Security Testing.
• Secure Code Review, Vulnerability Assessment, SAST, DAST, SCA.
• IaC Security, Container Security, CI/CD security integration, DevSecOps.
• Threat Modelling, Risk Assessment, Security Architecture Review.
• Kubernetes, Docker, Micro‑services, Cloud‑Native Applications.
• AWS Security, Azure Security, Identity & Access Management, Secrets Management.
• Knowledge of OWASP Top 10, OWASP API Security Top 10 and secure development practices.