обновлено 25 дней назад
Senior Cyber Security Engineer (Fintech)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Cyber Security Engineer / DevSecOps (Fintech): Building security into product, engineering, and infrastructure systems with an accent on security architecture, penetration testing, threat modeling, and cloud security. Focus on driving S-SDLC practices, conducting web, mobile, and cloud assessments, coordinating incident response, and improving vulnerability monitoring and security tooling.
Location: Cairo Office, hybrid
Company
is a fintech product company democratizing access to investing through a digital investment platform and the Rumble investment recommendations service across the MENA region.
What you will do
- Partner with product, engineering, and infrastructure teams to embed security architecture and best practices into product development.
- Drive S-SDLC activities, review security acceptance criteria, and conduct threat modeling and security code reviews.
- Plan and execute web, mobile, cloud, pre-deployment, and post-deployment penetration tests and security assessments.
- Define, implement, and monitor infrastructure security measures across servers, networks, storage, virtualization, and monitoring systems.
- Coordinate vulnerability management, incident response, red teaming, vulnerability research, and remediation across production and staging environments.
- Assess and integrate security tools, improve logging and monitoring, support the bug-bounty program, and mentor security team members.
Requirements
- Bachelor's degree in Computer Science, Software Engineering, or a related field, or equivalent experience.
- At least 5 years of application and/or infrastructure penetration testing experience beyond automated tools.
- Strong experience with security code reviews, software development principles, testing methodologies, version control, and network security.
- Solid understanding of AWS, Azure, or GCP and containerization technologies including Docker and Kubernetes.
- Hands-on experience implementing security policies and managing SIEM solutions, with knowledge of EDR, IDS, CSPM, and CWPP.
- Strong communication skills for explaining technical concepts to technical and non-technical stakeholders.
Nice to have
- Python experience.
- Experience with serverless or Lambda technologies.
- Fortinet experience.
Culture & Benefits
- Full-time employment in a hybrid Cairo office setup.
- Work on a mission focused on democratizing access to investing across the MENA region.
- Collaborate across product, engineering, infrastructure, and security functions.
- Contribute to products serving millions of users and first-time investors.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →