Security Engineer
About the role
As a Security Engineer at hSenid Business Solutions PLC, you will lead the Security-as-a-Service team, delivering security assessments, penetration tests, and risk mitigation strategies for both internal stakeholders and international clients. The role involves conducting cloud security assessments, vulnerability assessments, secure code reviews, and integrating security controls throughout the software development lifecycle. You will also be responsible for mentoring junior engineers, maintaining technical documentation, and staying updated with industry trends. The position requires a strong background in cybersecurity, cloud security, and vulnerability management, with hands-on experience in modern security tools and frameworks.
Must have
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent experience).
- Minimum 4-5 years of experience as a Security Engineer, Penetration Tester, or Cloud Security Specialist.
- Strong knowledge of application, network, and cloud security principles.
- Hands-on experience performing vulnerability assessments, penetration testing, and cloud security reviews.
- Understanding of secure coding practices and source code review for identifying security flaws.
- Experience with Azure, or Google Cloud security frameworks.
- Proficiency in encryption, authentication, and access control mechanisms.
- Knowledge of compliance standards (e.g., ISO 27001, GDPR, SOC 2).
- Familiarity with DevSecOps principles and integrating security into CI/CD pipelines.
- Strong analytical, problem-solving, and communication skills.
- Experience working with international clients and delivering professional assessment reports.
Nice to have
- Certifications such as CEH, OSCP, CompTIA Security+, or CISSP are highly advantageous.
- Experience with automation and scripting (Python, Bash, or PowerShell) for security operations.
- Knowledge of container and Kubernetes security.
- Familiarity with threat modeling, SIEM tools, and incident response frameworks.
- Experience implementing Zero Trust Architecture and cloud-native security solutions.
- Ability to conduct and lead security awareness programs for internal teams.
- Understanding of risk management frameworks and security documentation standards.
- Experience with reporting and presenting findings to technical and non-technical audiences
Technologies
- Authentication
- Azure
- Bash
- CEH
- CI/CD
- CISSP
- Cloud Native
- Cloud Security
- CompTIA Security+
- Cybersecurity
- DevSecOps
- GCP
- ISO 27001
- Kubernetes
- OSCP
- Penetration Testing
- PowerShell
- Python
- SIEM
- SOC 2
- Zero Trust
Highlights
Certifications such as CEH, OSCP, CompTIA Security+, or CISSP are highly advantageous. The company operates internationally, with clients in the APAC, Africa, Middle East, and Scandinavian regions. Experience working with international clients is important.
Also posted as
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka