Staff Security Engineer

Brak informacji o wynagrodzeniu

SeniorZdalnieFull-time

#409075·Dodano dwa miesiące temu·25

Źródło: Digital Zone

🚫Oferta wygasła. Ta oferta pracy nie jest już aktywna i rekrutacja została zakończona.

Tech Stack / Keywords

SecurityCloudSDLC LLMDesign PatternsNetworkingAWS OWASP

Firma i stanowisko

Digital Zone is a fintech company operating within the SuperQi super app, offering digital voucher and mini app solutions including Mobile top ups, event tickets, travel bookings, and hotel reservations. It originated in Iraq and has expanded regionally, being hosted by Qi Card since 2022.

Wymagania

8+ years in software or security engineering with hands-on experience across application security, cloud/infra security, and detection and response.
Strong experience in threat modeling and securing systems handling payments or sensitive financial and PII data.
Strong engineering fundamentals including fluency in AWS security, modern authentication and authorisation patterns, and at least one core programming language.
Working knowledge of security frameworks such as PCI DSS, ISO 27001, OWASP, and SOC 2 and ability to operationalize them without slowing delivery.
Ability to apply judgment on risk tradeoffs and communicate directly and practically with engineers and leadership.

Obowiązki

Design and mature secure SDLC processes supporting engineers in prioritising and remediating findings.
Leverage deterministic and LLM assisted automation for application security vulnerability identification and remediation.
Design and implement solutions to mitigate supply chain security risks including verification of dependencies and release integrity.
Integrate scalable solutions for infrastructure and cloud security including scanning, signing, admission control, and runtime security.
Run vulnerability management and coordinate penetration tests.
Define and track key vulnerability metrics.
Define secure-by-design patterns and success criteria for authentication, authorization, cloud networking, secrets management, and IAM.
Act as primary liaison between customers and security vendors to drive alignment on security findings, remediation priorities, risk acceptance, and strategic outcomes.

Benefity

Immediate large-scale impact on a high-growth business.
Top-of-the-market compensation packages.
Work alongside top regional talent from companies such as Talabat, Careem, and Etisalat.

Digital Zone

3 aktywne oferty

Zobacz wszystkie oferty