Engineer - IT Security
About the role
The Engineer - IT Security role at Commercial Bank involves conducting web and mobile application security testing (SAST/DAST) and vulnerability assessment and penetration testing (VAPT) on applications, APIs, and supporting infrastructure. The position requires performing security testing in CI/CD pipelines to ensure automated vulnerability scanning and compliance checks during development and deployment. The engineer will also conduct security reviews of new applications, APIs, and integrations for compliance with security standards and frameworks such as PCI DSS and CBSL. Candidates should have a relevant degree and hands-on experience with security tools and network/infrastructure security.
Must have
- Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
- 2 - 3 years of experience in application security testing, VAPT, and vulnerability management.
- Hands-on experience with SAST/DAST tools (e.g., Checkmarx, Burp Suite, OWASP ZAP, Fortify).
- Familiarity with network and infrastructure security, including firewalls, WAF, SIEM, and vulnerability scanners.
Technologies
- Burp Suite
- CI/CD
- Cybersecurity
- DAST
- Firewall
- OWASP
- PCI DSS
- Penetration Testing
- SAST
- SIEM
- Vulnerability Scanning
- WAF
Highlights
Applications must be submitted through the corporate website at www.combank.lk under Careers > Open Positions > Engineer - IT Security. The role is with Commercial Bank, a highly respected financial institution.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka