Information Security Engineer - Application Security
About the role
The Sri Lanka Computer Emergency Readiness Team (Sri Lanka CERT) is seeking a qualified and experienced Information Security Engineer specializing in Application Security. The role involves conducting security assessments and penetration testing of software applications, developing mitigation strategies, collaborating with development teams to integrate security controls, and ensuring compliance with industry standards. Additional responsibilities include incident response, documentation, training, procurement, and implementation of national cyber-security projects. Candidates must have a relevant degree, a verifiable cyber-security certification, and at least three years of industry experience after obtaining their degree. The position offers a salary based on industry standards and includes a travel allowance.
Must have
- Bachelor’s Degree (SLQF 5 or 6) in Information Security, Cyber-Security, Computer Science, Information Technology or any other field relevant to the post, obtained from a local or foreign university, recognized by the University Grant Commission (UGC) in Sri Lanka
- Should hold a verifiable Cyber-security Certification, preferably CSSLP, CEH, OSCP or any other security certification relevant to the post, recognized by Sri Lanka CERT. Such certifications must be maintained in active status.
- Three (03) years or above industry experience in the field of information and Cyber security or relevant, preferably in application security role within a reputed private sector cyber-security service provider, public corporation, statutory board, fully government owned company, or a reputed commercial establishment, after obtaining the first Degree.
- Hands on Experience in Application Security, Kali Linux tools, Burp Suite, Mobile Application tools.
- Understanding of information security standards (ISO, NIST, OWASP, CIS benchmark etc.)
- Knowledge on the latest theories, standards, and practices on cyber security.
- Fluent in writing and speaking in English language.
- Skills in presentations, communication, teamwork
Technologies
- Burp Suite
- CEH
- Linux
- NIST
- OSCP
- OWASP
- Penetration Testing
Highlights
Applicants must be between 25 and 35 years old. Applications should be sent to careers@cert.gov.lk with a recent photo and two non-related referees by 15th October 2026. Only shortlisted candidates will be notified. The job is based in Colombo and includes a travel allowance.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka