Staff Security Engineer

Digital Zone is a fintech company operating within the SuperQi super app, offering digital voucher and mini app solutions including Mobile top ups, event tickets, travel bookings, and hotel reservations. It originated in Iraq and has expanded regionally, being hosted by Qi Card since 2022.

• 8+ years in software or security engineering with hands-on experience across application security, cloud/infra security, and detection and response.
• Strong experience in threat modeling and securing systems handling payments or sensitive financial and PII data.
• Strong engineering fundamentals including fluency in AWS security, modern authentication and authorisation patterns, and at least one core programming language.
• Working knowledge of security frameworks such as PCI DSS, ISO 27001, OWASP, and SOC 2 and ability to operationalize them without slowing delivery.
• Ability to apply judgment on risk tradeoffs and communicate directly and practically with engineers and leadership.

• Design and mature secure SDLC processes supporting engineers in prioritising and remediating findings.
• Leverage deterministic and LLM assisted automation for application security vulnerability identification and remediation.
• Design and implement solutions to mitigate supply chain security risks including verification of dependencies and release integrity.
• Integrate scalable solutions for infrastructure and cloud security including scanning, signing, admission control, and runtime security.
• Run vulnerability management and coordinate penetration tests.
• Define and track key vulnerability metrics.
• Define secure-by-design patterns and success criteria for authentication, authorization, cloud networking, secrets management, and IAM.
• Act as primary liaison between customers and security vendors to drive alignment on security findings, remediation priorities, risk acceptance, and strategic outcomes.