Staff Security Engineer

Digital Zone started as an online platform providing digital vouchers and direct top ups for various products, earning trust as the leading digital voucher company in Iraq. Acquired by Qi Card in 2022, Digital Zone and its mini apps are now part of the SuperQi super app, simplifying digital tasks such as mobile top ups, event tickets, travel bookings, and hotel reservations across the Middle East.

• 8+ years in software or security engineering with hands-on application security, cloud/infra security, detection, and response.
• Proven experience in threat modeling and securing systems handling payments or sensitive financial and PII data.
• Strong engineering fundamentals including fluency in AWS security, modern authentication and authorization patterns, and at least one core programming language.
• Working knowledge of security frameworks such as PCI DSS, ISO 27001, OWASP, and SOC 2, and ability to operationalize them without slowing delivery.
• Ability to apply judgment on risk tradeoffs and communicate clearly and practically with engineers and leadership.

• Design and mature the secure SDLC to support prioritization and remediation of findings.

Application Security:

• Use deterministic and LLM assisted automation to identify and remediate vulnerabilities in code.

Supply Chain Security:

• Design solutions to mitigate risks from vulnerable and compromised third-party dependencies, verifying feature and release integrity.

Infrastructure & Cloud Security:

• Integrate scalable solutions to identify and patch vulnerabilities in container and cloud infrastructure processes including scanning, signing, admission control, and runtime security.
• Run vulnerability management and coordinate penetration tests.
• Define and track key vulnerability metrics.
• Define secure-by-design patterns and criteria for authentication, authorization, cloud networking, secrets management, and IAM.
• Act as primary liaison between customers and security vendors to align on findings, remediation, risk acceptance, and strategic outcomes.