Security Engineer

About the job

As a Security Engineer, you'll be an integral part of our Digital Security division at SAI, working within a multidisciplinary team. Your primary role will be to identify and deliver high-value digital security advisory services to our clients, with a strong focus on technical security assessments and penetration testing. The ideal candidate will be passionate about discovering new security vulnerabilities, collaborating with diverse stakeholders to improve business outcomes, and sharing knowledge. Our team is composed of experienced and junior consultants with a wide range of specialties.

• Conduct comprehensive penetration tests on web applications, mobile applications, and network infrastructure to identify vulnerabilities and security flaws.

• Perform static and dynamic analysis (SAST/DAST) on a variety of codebases and platforms to discover security vulnerabilities and provide actionable remediation steps to development teams.

• Work with internal and external customers to scope security assessments, explain the methodology, and support them with feedback and verification during the mitigation phase.

• Recommend and implement industry best practices for vulnerability and threat management.

• Enforce secure CI/CD practices by integrating security tools like SAST and dependency checkers into the development pipeline.

• Collaborate with development teams to fix identified vulnerabilities and provide guidance on secure coding techniques.

• Develop and deliver training on secure coding and security awareness for technical staff.

• Contribute to the design and implementation of secure SDLC (Software Development Life Cycle) and security-by-design principles.

• 5+ years of experience in delivering technical security services, including penetration testing, vulnerability assessments, and infrastructure security reviews.

• Demonstrated experience with web and mobile application security and the ability to discover vulnerabilities in source code and application design.

• Security qualification(s) such as OSCP, GPEN, CEH, CISSP, or other relevant penetration testing and security certifications.

• Strong knowledge and application of information security frameworks and methodologies such as OWASP, NIST, and ISO 27001.

• Advanced understanding of security protocols, cryptography, and network security concepts.

• Proven track record of working on complex projects in diverse environments.

• Strong analytical and problem-solving skills with a customer-oriented approach.

• Familiarity with Agile processes and principles.

• Experience with cloud security assessments (AWS, Azure, GCP).

• Competence in project management best practices.

• Experience with Google Workspace solutions and SaaS technologies.