Cyber Security Specialist
About the role
The Cyber Security Specialist will be responsible for overseeing application, cloud, and infrastructure security across the company's platform. The role involves conducting security reviews, identifying and remediating vulnerabilities, implementing security controls, and preparing for security assessments and compliance requirements. Key responsibilities include securing AWS, Cloudflare, databases, and production infrastructure, managing security tools, establishing secure development practices, conducting threat modeling, and assisting with incident response. The specialist will also work closely with the Privacy/Compliance Specialist on ISO 27001/27701 requirements and audits, and train developers on secure coding practices. The position requires 2–5 years of practical cybersecurity experience, a relevant degree or diploma, and strong experience in application and cloud security, particularly with AWS.
Must have
- Degree/diploma in Cybersecurity, Computer Science, IT or related field.
- 2–5 years of practical cybersecurity experience.
- Experience securing web applications and APIs.
- Practical AWS/cloud security experience.
- Strong understanding of OWASP and application security.
- Experience with vulnerability assessment and security testing.
- Strong analytical and problem-solving skills.
Nice to have
- OSCP, OSWE, PNPT or equivalent
- AWS Security Specialty
- ISO 27001 experience/certification
- Experience with SaaS and multi-tenant applications
- Experience working with compliance/security audits
Technologies
- API Security
- Authentication
- AWS
- Cloud Security
- Cloudflare
- CloudWatch
- Cybersecurity
- DAST
- IAM
- ISO 27001
- Linux
- Network Security
- OSCP
- OWASP
- Penetration Testing
- RBAC
- RDS
- S3
- SaaS
- SAST
- Secrets Management
- SQL
- SSL
- TLS
- VPC
- WAF
Highlights
Preferred qualifications include OSCP, OSWE, PNPT or equivalent certifications, AWS Security Specialty, ISO 27001 experience or certification, and experience with SaaS, multi-tenant applications, and compliance/security audits. The ideal candidate is hands-on and able to work directly with developers to build security into the platform.
Also posted as
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka