Security Engineer
About the role
The Security Engineer at OrangeHRM will be responsible for conducting vulnerability assessments and penetration testing on OrangeHRM's core products, identifying security inefficiencies, and supporting both QA and development teams to ensure best security practices are followed. The role involves designing and implementing security solutions, consulting on secure integrations, contributing to cloud security architecture, and monitoring production environments for vulnerabilities. The Security Engineer will also educate teams on security aspects, support TechOps in improving network and data security, assist with ISO 27001 tasks, and help administer the internal Artificial Intelligence Management System (AIMS). The position is with OrangeHRM, a global HR software company serving millions of users worldwide.
Must have
- Bachelor’s Degree in computer science or cyber security.
- 3 years of work experience in cyber security or in a related field.
- Knowledge of OWASP Top 10 (Web, Mobile, and LLM/AI Applications) / CWE Top 25.
- Hands-on experience on Web Application security assessments/ Pentesting (and AI assisted pentesting).
- Knowledge of ethical hacking concepts and responsibilities.
- Knowledge and understanding of industry-recognized information security policies and standards.
- Strong AI literacy with a practical understanding of Artificial Intelligence concepts, tools, and security implications.
- Sound knowledge on WEB 2.0 Applications & REST API security concepts / Cross-domain web request / Protective HTTP headers.
- Experience with authentication and authorization mechanisms including single sign-on patterns.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to work with clients and team members at all levels.
Nice to have
- Hands-on experience with OWASP ZAP, Burp Suite and other security scanning tools will be an added advantage.
- Professional certificates on Web Application Security will be an added advantage.
- Knowledge about ISO 27001 and Knowledge about the Linux environment will be an added advantage.
Technologies
- API Security
- Authentication
- Burp Suite
- Cloud Security
- ISO 27001
- Linux
- LLM
- OWASP
- Penetration Testing
- REST
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka