Security Engineer
About the role
OrangeHRM is seeking a Security Engineer for a full-time, on-site role in Colombo, Sri Lanka. The Security Engineer will be responsible for ensuring the security and resilience of OrangeHRM’s products and cloud platforms by conducting vulnerability assessments, penetration testing, and security audits. The role involves working closely with development, QA, and TechOps teams to implement security best practices, design and review security solutions, and contribute to the cloud security architecture. The position also includes mentoring teams on security aspects, supporting ISO 27001 tasks, and administering internal AI management systems.
Must have
- Bachelor’s Degree in computer science or cyber security.
- Knowledge of OWASP Top 10 (Web, Mobile, and LLM/AI Applications) / CWE Top 25.
- Hands-on experience on Web Application security assessments/Pentesting (and AI assisted Pentesting).
- Knowledge of ethical hacking concepts and responsibilities.
- Knowledge and understanding of industry-recognized information security policies and standards.
- Strong AI literacy with a practical understanding of Artificial Intelligence concepts, tools, and security implications.
- Sound knowledge on WEB 2.0 Applications & REST API security concepts / Cross-domain web request / Protective HTTP headers.
- Experience with authentication and authorization mechanisms including single sign-on patterns.
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Ability to work with clients and team members at all levels.
Nice to have
- Hands-on experience with OWASP ZAP, Burp Suite and other security scanning tools will be an added advantage.
- Professional certificates on Web Application Security will be an added advantage.
- Knowledge about ISO 27001 and Knowledge about the Linux environment will be an added advantage.
Technologies
- API Security
- Authentication
- Burp Suite
- Cloud Security
- ISO 27001
- Linux
- LLM
- OWASP
- Penetration Testing
- REST
Highlights
The position is based in Colombo, Sri Lanka and requires on-site work. The company serves a global client base and offers exposure to cloud security, AI, and ISO 27001 standards.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka