Job Description
Responsibilities:
Review architecture, design, and code across services and platforms to identify potential security weaknesses.
Integrate security best practices into the SDLC, including secure coding standards, static/dynamic analysis, and threat modeling.
Perform manual and automated code reviews to catch common security vulnerabilities (e.g., injection, XSS, insecure deserialization).
Collaborate with development and DevOps teams to ensure secure deployment practices and runtime protections (e.g., secrets management, container security, least privilege access).
Guide teams on remediation strategies and help implement security improvements.
Respond to security incidents and work on root cause analysis and hardening.
Stay updated on current and emerging security threats, tools, and techniques.
Requirements:
Strong understanding of common application security vulnerabilities (OWASP Top 10, CWE) and how to remediate them.
Experience performing secure code reviews in languages like Java, Python, C++ etc..
Familiarity with CI/CD pipelines and how to embed security into build and deployment processes.
Experience with application security tools (SAST, DAST, SCA, IAST, etc.).
Good understanding of cloud infrastructure and securing applications in production (AWS/GCP/Azure, containers, Kubernetes, etc.).
Solid communication skills and the ability to work cross-functionally with engineering teams.
We offer:
Experience a dynamic and team-orientated work environment.
Opportunities for personal growth and learning
An open, inclusive and supportive team where you will be valued, and your suggestions will be welcome
26 days paid holiday per year, in addition to local public holidays
Competitive salary
Risk Benefits such as pension, Life Assurance (4x annual salary), Private Medical Insurance
Team Building activities
Local discounts and more...!
