Oversee security across the entire infrastructure and codebase.
Conduct penetration testing and proactively identify system vulnerabilities.
Assess and improve security across enterprise deployments.
Identify and remediate security flaws in applications, DevOps pipelines, and cloud environments.
Strengthen data protection controls including encryption, access management, audit logging, and secure hosting.
Lead compliance initiatives for SOC 2, ISO 27001, and GDPR.
Support audit preparation, security reviews, and certification activities.
Establish secure development practices and security review processes.
Partner with Engineering, DevOps, and ML teams to embed security throughout the development lifecycle.
Drive continuous improvement of the organization's security posture.

3 to 6 years of experience in Security Engineering.
Hands-on experience with Penetration Testing and Vulnerability Assessment.
Strong understanding of Application Security and Code Security practices.
Experience identifying security risks across codebases, CI/CD pipelines, and cloud environments.
Working knowledge of AWS, GCP, and Azure security best practices.
Experience with Docker and Kubernetes security.
Familiarity with SAST, DAST, dependency scanning, and vulnerability management tools.
Knowledge of SOC 2, ISO 27001, and GDPR compliance frameworks.
Experience with Git and CI/CD systems.
Strong written and verbal communication skills in English.
Experience securing AI/ML systems is a plus.

Senior Security Engineer

Key skills