Security Engineer
About the role
As a Security Engineer at hSenid Business Solutions PLC, you will lead the Security-as-a-Service team, delivering security assessments, penetration tests, and risk mitigation strategies for both internal stakeholders and international clients. The role involves managing cloud security assessments, conducting vulnerability and penetration testing, implementing secure software practices, and collaborating with development and infrastructure teams to integrate security controls. The position requires a strong background in cybersecurity, cloud security, and vulnerability management, with hands-on experience in modern security tools and frameworks. The company, hSenidBiz, is a leading HR Tech provider with a global presence, serving over 1,700 organizations in more than 40 countries.
Must have
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent experience).
- Proven experience as a Security Engineer, Penetration Tester, or Cloud Security Specialist.
- Strong knowledge of application, network, and cloud security principles.
- Hands-on experience performing vulnerability assessments, penetration testing, and cloud security reviews.
- Understanding of secure coding practices and source code review for identifying security flaws.
- Experience with Azure, or Google Cloud security frameworks.
- Proficiency in encryption, authentication, and access control mechanisms.
- Knowledge of compliance standards (e.g., ISO 27001, GDPR, SOC 2).
- Familiarity with DevSecOps principles and integrating security into CI/CD pipelines.
- Strong analytical, problem-solving, and communication skills.
- Experience working with international clients and delivering professional assessment reports.
Nice to have
- Certifications such as CEH, OSCP, CompTIA Security+, or CISSP are highly advantageous.
- Experience with automation and scripting (Python, Bash, or PowerShell) for security operations.
- Knowledge of container and Kubernetes security.
- Familiarity with threat modeling, SIEM tools, and incident response frameworks.
- Experience implementing Zero Trust Architecture and cloud-native security solutions.
- Ability to conduct and lead security awareness programs for internal teams.
- Understanding of risk management frameworks and security documentation standards.
- Experience with reporting and presenting findings to technical and non-technical audiences.
Technologies
- Authentication
- Azure
- Bash
- CEH
- CI/CD
- CISSP
- Cloud Native
- Cloud Security
- CompTIA Security+
- Cybersecurity
- DevSecOps
- GCP
- ISO 27001
- Kubernetes
- OSCP
- Penetration Testing
- PowerShell
- Python
- SIEM
- SOC 2
- Zero Trust
Highlights
Certifications such as CEH, OSCP, CompTIA Security+, or CISSP are highly advantageous. Experience working with international clients, including those in Scandinavian markets, is mentioned. The company is headquartered in Colombo, Sri Lanka, with offices in the Philippines and Singapore.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka