Security Engineer

About the role

We are seeking a Security Engineer to strengthen the security of our internally developed software products and infrastructure. The role blends hands‑on security testing, vulnerability research and close collaboration with engineering teams to embed security throughout the development lifecycle.

Key responsibilities

• Conduct vulnerability assessments and penetration testing on web applications and APIs.
• Plan and execute red‑team, adversary‑simulation and threat‑emulation activities.
• Collaborate with developers to integrate security controls into the software development lifecycle.
• Investigate security incidents and provide actionable remediation recommendations.
• Support threat modeling and risk‑assessment workshops.
• Improve container security practices and automate security testing.
• Produce clear vulnerability reports and guide developers on remediation.
• Promote security awareness and best practices across engineering teams.

Required profile

• 3–5 years of experience in web development or software engineering.
• Strong understanding of the OWASP Top 10 and web‑application security concepts.
• Proficiency with security testing tools such as Burp Suite or OWASP ZAP.
• Solid knowledge of HTTP, REST APIs, authentication mechanisms, databases and session management.
• Ability to read, understand and debug source code.
• Scripting or automation experience with Python, Bash, PowerShell or JavaScript.
• Analytical and troubleshooting skills with a B2‑level proficiency in English.

Required skills

• Vulnerability assessment
• Penetration testing
• Red‑team operations
• Threat modeling
• OWASP Top 10
• Burp Suite
• OWASP ZAP
• ffuf (optional)
• Docker
• REST APIs
• HTTP
• Authentication
• Databases
• Python
• Bash
• PowerShell
• JavaScript