Senior Security Engineer (m/f/d)

Role Overview

Key Responsibilities

• Conduct web, mobile, and API penetration testing and vulnerability assessments.
• Perform secure code reviews and identify application and infrastructure security weaknesses.
• Manage SAST, DAST, SCA, IaC security, and container security tooling.
• Drive DevSecOps initiatives and integrate security controls into CI/CD pipelines.
• Perform threat modelling, risk assessments, and architecture reviews.
• Design and review secure solutions across cloud, container, Kubernetes, and enterprise platforms.
• Lead vulnerability management, remediation planning, and tracking.
• Support incident investigations, root cause analysis, and remediation.
• Deliver security awareness sessions and secure coding training.
• Collaborate with development, DevOps, infrastructure, and product teams.
• Improve security standards, processes, and governance frameworks.
• Participate in security reviews and compliance initiatives.

Required Skills and Qualifications

• 8–15 years of experience in information security, cybersecurity, or security engineering roles.
• Strong expertise in application, infrastructure, and cloud security and security architecture.
• Experience in web application, API, and mobile penetration testing and vulnerability assessments.
• Understanding of the OWASP Top 10, OWASP API Security Top 10, and secure development practices.
• Experience implementing DevSecOps programmes and CI/CD security integration.
• Experience with threat modelling, risk assessments, architecture reviews, and secure design assessments.
• Experience securing Kubernetes, Docker, microservices, and cloud-native applications.
• Knowledge of AWS security, Azure security, identity and access management, secrets management, and network security.
• Experience supporting security incident response and remediation.
• Stakeholder management, presentation, communication, scripting, and automation skills using Python, Bash, or PowerShell.

Preferred Skills and Experience

• Banking or financial services industry experience is preferred.
• Knowledge of PCI-DSS and frameworks such as ISO 27001, SOC 2, NIST, or CIS is preferred.
• Familiarity with GDPR, Security Champion programmes, Security Operations, or Incident Response is preferred.
• Relevant certifications such as CISSP, CSSLP, OSCP, CEH, AWS Security Specialty, or Azure Security Engineer Associate are preferred.

About Halian Group