Senior / Lead Security Engineer
A newer copy of this job is live on linkedin.com.View latest
About the role
As a Senior / Lead Security Engineer at IFS, you will provide technical leadership for security engineering across the organization. The role involves setting technical direction, owning critical security domains (such as AppSec, CloudSec, CI/CD security, and vulnerability management), driving cross-team security initiatives, and mentoring engineers at all levels. You will be responsible for the maturity and effectiveness of security engineering, balancing risk, delivery, and engineering realities. The position is technical leadership-focused, not people management, and requires hands-on engineering, automation, and practical fluency with AI tools in an engineering context. IFS is a global company with a commitment to diversity, inclusion, and sustainability, offering flexible and hybrid work opportunities.
Must have
- Typically 4+ years in security engineering, software engineering, or platform engineering.
- Proven track record owning security capabilities or programs at scale.
- Deep expertise across multiple domains (AppSec, CloudSec, CI/CD security, architecture).
- Strong hands-on engineering and automation background.
- Demonstrated technical leadership and cross-team influence.
- Practical fluency with AI tools in an engineering context — for example AI coding assistants, AI-assisted security scanning and triage, or LLM-based analysis — and the judgment to validate their output rather than trust it blindly.
- Demonstrated experience in security engineering with hands-on involvement in automated security solutions.
- Working knowledge of DevSecOps principles and practices.
- Practical experience with CI/CD tools (e.g., Bitbucket, Jenkins, GitLab, GitHub Actions, or equivalent).
- Proficiency in security platforms, vulnerability management tools, and at least one scripting language (e.g., Python, Bash).
- Comfort working with AI-assisted development and security tools (e.g., AI coding assistants, AI-driven SAST/DAST/SCA triage) as part of the day-to-day toolkit, with the judgment to review and validate AI-generated output.
- Solid understanding of common vulnerabilities (e.g., OWASP Top 10) and remediation approaches.
- Strong communication and collaboration skills with the ability to engage cross-functional teams.
- Familiarity with containerization tools (e.g., Docker, Kubernetes).
- Knowledge of security standards (e.g., NIST, ISO 27001, CIS).
Technologies
- Bash
- Bitbucket
- CI/CD
- Container Security
- DAST
- DevSecOps
- Docker
- FedRAMP
- Generative AI
- GitHub
- GitHub Actions
- GitLab
- IFS
- Infrastructure as Code
- ISO 27001
- Jenkins
- Kubernetes
- LLM
- NIST
- OWASP
- Penetration Testing
- Python
- SAST
- SOC 2
Highlights
The company offers flexible and hybrid work arrangements to support diverse needs and lifestyles. The role is not a people-management position but carries significant influence and mentorship responsibilities. IFS values diversity and inclusion and fosters a sense of community and belonging. No application deadline or specific application method is mentioned.
Also posted as
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka