Security Engineer

Job ObjectiveIn this position, the candidate will take full ownership of the security posture across our entire product ecosystem and infrastructure. You will be the primary guardian of our systems, data, and applications, ensuring robust protection against threats while enabling secure and compliant product development and operations.Your main responsibilitiesDesign, implement, and maintain comprehensive security strategies for our web applications, public-facing websites, backend systems, and internal tools.Conduct regular security assessments, vulnerability scanning, penetration testing, and code reviews; lead threat modeling and risk assessments for new and existing features. Build and maintain security monitoring, detection, and response capabilities (SIEM, EDR, log analysis, anomaly detection). Implement and enforce security best practices in CI/CD pipelines.Manage identity and access control, secrets management, network security, and endpoint protection across multi-cloud and on-prem environments. Ensure compliance with relevant standards (GDPR, ISO 27001, SOC 2, etc.) and support internal and external audits. Collaborate closely with engineering, SRE, and product teams to embed security into the development lifecycle. Produce clear security metrics, risk dashboards, and executive reports for leadership. Stay current with the evolving threat landscape and proactively implement preventive and detective controls.Your profile5+ years of hands-on experience in cybersecurity, with at least 3 years in a senior role. Proven track record securing web applications, APIs, cloud environments, and CI/CD pipelines. Strong expertise in multiple security domains: application security, infrastructure security, cloud security, network security, and incident response. Hands-on experience with modern security tools such as Burp Suite, OWASP ZAP, Nessus/OpenVAS, Splunk/ELK, and OSS XDR/SIEM Wazuh.Solid programming/scripting skills (Python, Bash, PowerShell, or similar) for automation and tooling. Deep knowledge of security standards, frameworks, and compliance requirements. Experience with secure SDLC and SRE practices. Strong analytical and problem-solving skills with the ability to handle high-pressure situations. Fluent English.Security certifications (CISSP, OSCP, CISM) are a strong plus.