Security & Vulnerability Engineer

About the role

We are looking for a hands‑on Security & Vulnerability Engineer to lead the security assessment function for our customers’ applications, infrastructure, cloud and network environments. Reporting to the CTO, you will identify, evaluate and communicate security risks while driving remediation and continuous improvement.

Key responsibilities

• Own the end‑to‑end vulnerability assessment lifecycle across applications, infrastructure, cloud platforms and networks.
• Perform both automated and manual security testing, including code reviews, network scanning, SAST, DAST, dependency and container security analysis.
• Document and present findings, risk ratings and remediation recommendations to engineering teams, customers and senior leadership.
• Develop scripts and automation to increase assessment efficiency, consistency and coverage.
• Collaborate with Engineering, DevOps and Cloud teams to validate remediation and enhance overall security posture.
• Stay up‑to‑date with industry best practices, emerging threats and modern security tooling.

Required profile

• 5+ years of hands‑on experience in cybersecurity, application security, vulnerability assessment or penetration testing.
• Strong understanding of secure software development, OWASP Top 10 and common vulnerability types.
• Excellent communication skills, able to translate technical findings into clear, actionable advice for both technical and business audiences.

Required skills

• Bash scripting and Linux environment proficiency.
• Experience with at least one major cloud platform (AWS, Azure or GCP).
• Use of automated security tools such as network scanners, SAST, DAST, dependency scanners and container security solutions.
• Familiarity with AI‑assisted engineering tools for security analysis and documentation.