Security_Engineer.
About the role
The Security Engineer at hSenid Business Solutions PLC will lead the Security-as-a-Service team, focusing on safeguarding systems, applications, and cloud environments. The role involves conducting security assessments, penetration testing, and risk mitigation for both internal stakeholders and international clients, including those in the Scandinavian markets. Key responsibilities include managing the SECaaS team, performing vulnerability and cloud security assessments, secure code reviews, collaborating with development teams, and ensuring compliance with industry standards. The ideal candidate will have a strong background in cybersecurity, cloud security, and vulnerability management, with hands-on experience in modern security tools and frameworks. The position also involves mentoring junior engineers and promoting security awareness within the organization.
Must have
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent experience).
- Proven experience as a Security Engineer, Penetration Tester, or Cloud Security Specialist.
- Strong knowledge of application, network, and cloud security principles.
- Hands-on experience performing vulnerability assessments, penetration testing, and cloud security reviews.
- Understanding of secure coding practices and source code review for identifying security flaws.
- Experience with AWS, Azure, or Google Cloud security frameworks.
- Proficiency in encryption, authentication, and access control mechanisms.
- Knowledge of compliance standards (e.g., ISO 27001, GDPR, SOC 2).
- Familiarity with DevSecOps principles and integrating security into CI/CD pipelines.
- Strong analytical, problem-solving, and communication skills.
- Experience working with international clients and delivering professional assessment reports.
Nice to have
- Certifications such as CEH, OSCP, CompTIA Security+, or CISSP are highly advantageous.
- Experience with automation and scripting (Python, Bash, or PowerShell) for security operations.
- Knowledge of container and Kubernetes security.
- Familiarity with threat modeling, SIEM tools, and incident response frameworks.
- Experience implementing Zero Trust Architecture and cloud-native security solutions.
- Ability to conduct and lead security awareness programs for internal teams.
- Understanding of risk management frameworks and security documentation standards.
- Experience with reporting and presenting findings to technical and non-technical audiences.
Technologies
- Authentication
- AWS
- Azure
- Bash
- CEH
- CI/CD
- CISSP
- Cloud Native
- Cloud Security
- CompTIA Security+
- Cybersecurity
- DevSecOps
- GCP
- ISO 27001
- Kubernetes
- OSCP
- Penetration Testing
- PowerShell
- Python
- SIEM
- SOC 2
- Zero Trust
Highlights
Certifications such as CEH, OSCP, CompTIA Security+, or CISSP are highly advantageous. Experience working with international clients is required. The company operates in the APAC, Africa, and Middle East regions, with its headquarters in Colombo, Sri Lanka.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka