Назад
Company hidden
1 день назад

Senior Cyber Security Engineer / DevSecOps (Fintech)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Egypt
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Cyber Security Engineer / DevSecOps (Fintech): Building security into a digital investing platform with an accent on security architecture, penetration testing, threat modeling, and infrastructure protection. Focus on conducting web, mobile, and cloud assessments, improving detection and monitoring, and coordinating incident response through remediation.

Location: Cairo Office, Egypt; hybrid workplace

Company

hirify.global is a fintech product company democratizing access to investing through a digital investing platform and the Rumble subscription-based investment recommendations service across the MENA region.

What you will do

  • Partner with product and engineering teams on security architecture, feature reviews, security acceptance criteria, threat modeling, and S-SDLC practices.
  • Perform pre- and post-deployment penetration tests and regular web, mobile, cloud, infrastructure, and red-team security assessments.
  • Define, implement, and monitor infrastructure security measures and manage vulnerability remediation across production and staging environments.
  • Improve security tooling, logging, monitoring, and incident response; coordinate company-wide responses through remediation.
  • Conduct vulnerability research, support the bug-bounty program, follow emerging threats, and drive required security changes.
  • Mentor security team members and train engineering teams on security checks and best practices.

Requirements

  • Bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent work experience.
  • At least 5 years of application and/or infrastructure penetration-testing experience beyond running automated tools.
  • Strong experience with security code reviews.
  • Solid understanding of cloud platforms, including AWS, Azure, or GCP, and containerization technologies such as Docker and Kubernetes.
  • Understanding of software development principles, software testing methodologies, and version control systems such as Git.
  • Hands-on experience implementing security policies across servers, storage, networks, security, virtualization, systems monitoring, and management environments.
  • Strong communication skills and the ability to explain technical concepts to technical and non-technical stakeholders.
  • Solid understanding of networks and network security, hands-on SIEM management experience, and knowledge of EDR, IDS, CSPM, and CWPP.

Nice to have

  • Python experience.
  • Experience with serverless or Lambda technologies.
  • Experience with Fortinet.

Culture & Benefits

  • Full-time hybrid work from the Cairo office.
  • Collaborative work embedded across product, engineering, infrastructure, and security teams.
  • Opportunity to contribute to a platform used by first-time investors and customers across the MENA region.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →