Career

Application & Cloud Security Engineer 

Responsibilities: 

DevSecOps & Pipeline Security: 

• Build and maintain security automation in CI/CD pipelines. 

• Run code scanning, dependency checks, and container image scanning. 

• Manage secret storage, rotation, and detection. 

Application & API Security: 

• Review code and help teams follow secure coding practices. 

• Protect APIs with authentication, rate limits, and validation. 

• Support developers in fixing identified vulnerabilities. 

Cloud Security: 

• Manage IAM roles, access control, and least-privilege policies. 

• Configure Cloudflare WAF and cloud firewall rules. 

• Monitor cloud configurations and enforce security best practices. 

Monitoring & Incident Response: 

• Track vulnerabilities, alerts, and suspicious activities. 

• Support incident response and root-cause analysis. 

• Maintain dashboards and automated alerts. 

Compliance & Governance: 

• Support ISO27001, SOC2, or other compliance requirements. 

• Keep documentation, audit logs, and security reports up to date. 

• Work with the Security Architect on long-term improvements. 

Requirements: 

Must Have: 

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or related technical field. 

• 3+ years in Application Security, Cloud Security, or DevSecOps. 

• Experience with AWS/Azure/GCP security tools. 

• Hands-on with CI/CD pipelines and security scanners (SAST/DAST/SCA). 

• Solid understanding of IAM, WAF, encryption, and secret management. 

• Knowledge of OWASP Top 10 and API Security Top 10. 

• Experience working with logging, SIEM, and monitoring tools. 

Nice to Have: 

• Kubernetes security experience (OPA, Falco, image signing). 

• Experience with Cloudflare security tools. 

• Penetration testing or red-team experience. 

• Understanding of ISO 27001, SOC2, UL 3300, or GDPR. 

• Security certifications (e.g., CEH, GCSA, CISSP, AZ-500). 

• Scripting skills (Python, Bash, Go).