Senior/Lead Security Engineer

View full description

Requirements:

• Minimum of 5 years of experience in security, ethical hacking, or penetration testing.
• Strong knowledge of network protocols, operating systems, and security architectures
• Proficiency in using penetration testing tools such as Burp Suite, Kali, nmap, Wireshark, and Metasploit.
• Experience with scripting and programming languages (e.g., Python, Bash, PowerShell, Go, Javascript) to develop custom tools and exploits.
• Proficiency with AWS, CDN, WAF, modern web application and data pipelines (ie. Node.js, python).
• Strong understanding of network security, cryptography, and secure coding practices.
• Comprehensive understanding of OWASP Top Ten (WebApp, LLM, CI/CD) and common weaknesses and vulnerabilities, NIST.
• Relevant certifications such as AWS Certifications (Solutions Architect, Security Speciality, etc.) GWAPT, OSWE, OSCP, OSCE, OSEP, OSEE, CCSAS, CCT INF or relevant SANS courses (SEC540) are highly desirable.

Responsibilities:

• Create detailed design documents and guidelines for Engineering Teams.
• Execute comprehensive penetration tests on web applications, networks, and systems to identify security vulnerabilities.
• Implement and manage security controls in cloud environments (AWS and Cloudflare) to ensure secure cloud architecture and data protection.
• Work closely with IT, development, and business teams to integrate security best practices across all technology initiatives.
• Collaborate with security and engineering teams and stakeholders to enhance security posture and implement mitigation strategies.
• Mentor and train other engineers, sharing knowledge and best practices.
• Conduct security assessments, penetration testing, and vulnerability scans to identify and remediate security gaps.
• Design and implement robust security solutions and security architecture to protect against cyber threats, ensuring the integrity and availability of systems and data.
• Evaluate, deploy, and manage security tools such as SIEM, EDR, IDS/IPS, and endpoint protection solutions.
• Proficient in leveraging security logs and/or a SIEM to detect, investigate, and respond to security events.