Engineer - IT Security

About the role

We are seeking an Engineer specialized in IT Security to perform web and mobile application security testing, conduct VAPT, and embed secure development practices across our platforms.

Key responsibilities

• Conduct web and mobile application security testing (SAST/DAST) and VAPT on applications, APIs, and supporting infrastructure.
• Perform security testing in CI/CD pipelines to ensure automated vulnerability scanning and compliance checks during development and deployment.
• Review new applications, APIs, and integrations for compliance with standards such as PCI DSS and CBSL.
• Coordinate vulnerability management, risk‑based prioritization, and remediation tracking.
• Collaborate with cross‑functional teams to implement secure coding and DevSecOps practices.
• Monitor emerging vulnerabilities, threats, and advisories relevant to applications and infrastructure.
• Prepare technical reports and executive summaries on identified risks and mitigation strategies.

Required profile

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
• 2‑3 years of experience in application security testing, VAPT, and vulnerability management.
• Hands‑on experience with SAST/DAST tools such as Checkmarx, Burp Suite, OWASP ZAP, or Fortify.
• Familiarity with network and infrastructure security, including firewalls, WAF, SIEM, and vulnerability scanners.
• Professional certifications (e.g., CEH, OSCP, Security+, GWAPT, eJPT) are a plus.
• Experience securing CI/CD pipelines using Jenkins, GitLab CI, Azure DevOps, or GitHub Actions.
• Knowledge of OWASP Top 10, secure coding practices, and application threat modeling.
• Proficiency in scripting/automation with Python, PowerShell, or Bash.

Required skills

• Checkmarx
• Burp Suite
• OWASP ZAP
• Fortify
• Firewalls
• Web Application Firewall (WAF)
• Security Information and Event Management (SIEM)
• Vulnerability scanners
• Jenkins
• GitLab CI
• Azure DevOps
• GitHub Actions
• OWASP Top 10
• Python
• PowerShell
• Bash