Engineer - IT Security
About the role
The Engineer - IT Security role involves conducting security testing for web and mobile applications, including SAST/DAST and VAPT, as well as vulnerability management and compliance checks within CI/CD pipelines. The position requires reviewing applications and integrations for adherence to security standards, coordinating risk-based vulnerability remediation, and collaborating with teams to implement secure coding and DevSecOps practices. The engineer will also monitor emerging threats and prepare technical and executive reports on risks and mitigation strategies. Candidates should have a relevant bachelor's degree and 2-3 years of experience in application security testing and vulnerability management, with hands-on experience using SAST/DAST tools and familiarity with network and infrastructure security.
Must have
- Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
- 2 - 3 years of experience in application security testing, VAPT, and vulnerability management.
- Hands-on experience with SAST/DAST tools (e.g., Checkmarx, Burp Suite, OWASP ZAP, Fortify).
- Familiarity with network and infrastructure security, including firewalls, WAF, SIEM, and vulnerability scanners.
- Experience in CI/CD pipeline security testing (Jenkins, GitLab CI, Azure DevOps, GitHub Actions).
- Knowledge of OWASP Top 10, secure coding practices, and application threat modeling.
- Strong analytical, communication, and collaboration skills, with high attention to detail.
Nice to have
- Professional certifications such as CEH, OSCP, Security+, GWAPT, eJPT are an advantage.
- Proficiency in scripting/automation (Python, PowerShell, Bash) is a plus.
Technologies
- Azure DevOps
- Bash
- Burp Suite
- CEH
- CI/CD
- CompTIA Security+
- Cybersecurity
- DAST
- DevSecOps
- Firewall
- GitHub
- GitHub Actions
- GitLab
- Jenkins
- OSCP
- OWASP
- PCI DSS
- PowerShell
- Python
- SAST
- SIEM
- Vulnerability Scanning
- WAF
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka