CS

Senior Engineer - Information Security

Colombo Stock Exchangetopjobs.lk
Sep 23, 20264w ago
Colombo, Sri LankaSecuritySenior (3+ yrs)

About the role

The Colombo Stock Exchange (CSE) is seeking a Senior Engineer - Information Security (Senior Executive Grade) to play a key role in leading security assessments, identifying vulnerabilities, and enhancing the organization's security posture. The role involves conducting VAPT and security assessments of web/mobile applications, APIs, servers, databases, and network infrastructure, preparing technical reports, coordinating with system owners, supporting incident response, and proactively identifying information security risks. The position also requires monitoring emerging cyber threats and recommending security improvements. Candidates should have hands-on experience in information security, proficiency with industry-standard tools, and relevant certifications.

Must have

  • Minimum 3 years of hands-on Information Security experience, including at least 2 years in VAPT.
  • Strong hands-on experience in manual and automated vulnerability assessments, penetration testing, and threat hunting.
  • Proficiency in vulnerability assessment tools such as Burp Suite, Nexpose, Qualys, and similar industry-standard tools.
  • Knowledge of DevSecOps practices and integrating security into development and deployment processes.
  • Professional certifications such as OSCP, PNPT, eJPT, Cloud Security, or other relevant Information Security certifications will be an advantage.
  • Bachelor’s degree in Information Technology, Engineering, Cyber Security, or a related discipline from a recognized university, and/or equivalent qualifications.
  • Strong analytical, communication, teamwork, organizational, and problem-solving skills, with a proactive and positive approach.

Technologies

  • Burp Suite
  • Cloud Security
  • DevSecOps
  • OSCP
  • Penetration Testing
  • Threat Hunting

Highlights

Applicants are required to send their updated CV to careers@cse.lk within 7 days of the advertisement. Professional certifications such as OSCP, PNPT, eJPT, Cloud Security, or other relevant Information Security certifications will be an advantage. The company is an equal opportunity employer and invites all eligible candidates to apply.