CS

Senior Engineer - Information Security

Colombo Stock Exchangelinkedin.com
Oct 7, 2026, 2:31 PM2w ago
Full-timeColombo District, Western ProvinceSecuritySenior (3+ yrs)

About the role

The Senior Engineer - Information Security at the Colombo Stock Exchange (CSE) is responsible for leading security assessments, identifying vulnerabilities, and enhancing the organization's security posture. The role involves conducting vulnerability assessments and penetration testing (VAPT) on various systems, analyzing and prioritizing cybersecurity vulnerabilities, preparing technical reports, and coordinating with different teams to ensure remediation. Additional responsibilities include supporting incident response, reviewing new projects from a cybersecurity perspective, and staying updated on emerging threats and best practices. The position requires hands-on experience in information security, proficiency with industry-standard tools, and relevant educational qualifications.

Must have

  • Minimum 3 years of hands-on Information Security experience, including at least 2 years in VAPT.
  • Strong hands-on experience in manual and automated vulnerability assessments, penetration testing, and threat hunting.
  • Proficiency in vulnerability assessment tools such as Burp Suite, Nexpose, Qualys, and similar industry-standard tools.
  • Knowledge of DevSecOps practices and integrating security into development and deployment processes.
  • Bachelor’s degree in Information Technology, Engineering, Cyber Security, or a related discipline from a recognized university, and/or equivalent qualifications.
  • Strong analytical, communication, teamwork, organizational, and problem-solving skills, with a proactive and positive approach.

Nice to have

  • Professional certifications such as OSCP, PNPT, eJPT, Cloud Security, or other relevant Information Security certifications will be an advantage.

Technologies

  • Burp Suite
  • Cloud Security
  • Cybersecurity
  • DevSecOps
  • OSCP
  • Penetration Testing
  • Threat Hunting

Highlights

Applicants should send their updated CV to careers@cse.lk within 7 days of the advertisement. Professional certifications such as OSCP, PNPT, eJPT, or Cloud Security are considered an advantage. The company is an equal opportunity employer.