Security Engineer (Application, Cloud & DevSecOps)

About the role

We are seeking an experienced Security Engineer with 7–12 years of hands‑on expertise in application, infrastructure and cloud security. The role will drive penetration testing, DevSecOps automation and security architecture across multiple cross‑functional teams.

Key responsibilities

• Conduct penetration testing for web, mobile and API applications.
• Perform secure code reviews and remediate vulnerabilities in application code, scripts and configurations.
• Configure, optimize and manage SAST, DAST, SCA, IaC and container‑scanning tools.
• Lead DevSecOps initiatives, embedding security automation into CI/CD pipelines.
• Enhance security posture of Kubernetes, container runtimes and underlying infrastructure.
• Contribute to security architecture design and conduct risk reviews for applications and cloud environments.
• Drive threat modeling, risk assessments and end‑to‑end vulnerability management.
• Provide security awareness training and workshops for development and operations teams.
• Act as a trusted advisor, translating technical risks into actionable recommendations for non‑technical stakeholders.
• Participate in incident response, post‑incident reviews and implement lessons learned.

Required profile

• 7–12 years of professional experience in information security, including web, mobile and API penetration testing.
• Strong analytical, problem‑solving and communication skills, with the ability to work collaboratively with development, DevOps and leadership teams.

Required skills

• Penetration testing (web, mobile, API)
• DevSecOps practices and CI/CD pipeline security
• Cloud security on AWS and Azure
• Kubernetes and Docker container security
• SAST, DAST, SCA, IaC and container‑scanning tools
• Scripting in Python and Bash