Cybersecurity Engineer

Key Responsibilities

• Ensure that static and dynamic application security testing (SAST/DAST) is enabled, updated in the CI/CD pipelines. Identify, triage and help remediate security vulnerabilities in Kubernetes clusters, applications and dependencies.
• Embed security checks into CI/CD pipelines (SAST, DAST, dependency scanning, container scanning, IaC security). Automate security testing and integrate with the team's GitOps/DevOps workflows.
• Partner with developers in the team to provide secure coding practices. Evangelize and train team members on security best practices and emerging threats.
• Support the team in developing secure logging, monitoring and alerting strategies. Participate in incident response planning and post-incident reviews.
• Set up and manage continuous security monitoring tools to detect and respond to security incidents in real-time.
• Ensure compliance with relevant industry standards and regulations and conduct regular security audits.
• Maintain clear and up-to-date documentation of security architecture, in addition to security policies, procedures, and incident response plans, Security Management Plan.
• Provide regular reports on the cybersecurity status, including vulnerability assessments, threat modelling results, and incident response activities, to the product owners and other stakeholders.
• Collaborate with InfoSec and Compliance teams to run regular security audits, risk assessments and data assessments.
• Work in an agile, cross-functional multinational team, actively engaging to support the success of the team.