Senior Information Security Engineer

Lead or participate in incident response activities and conduct technical investigations including digital forensics to identify causes and recommend mitigations.

Design, document, test, maintain, and resolve issues for moderately complex security solutions involving networking, cryptography, cloud, authentication, directory services, email, internet, applications, and endpoint security.

Perform penetration testing and application security assessments; utilize industry-leading security practices to identify vulnerabilities, conduct risk assessments, and recommend remediation.

4+ years of Information Security Engineering experience or equivalent demonstrated through work, training, military experience, or education.

Experience in penetration testing, offensive security, or red teaming preferred (desired, not mandatory).

Proficiency in at least one programming language and scripting experience in Python or PowerShell.

Work Experience Required: 4+ years in Information Security Engineering. Notice period: Not explicitly mentioned.

Experienced in advanced penetration testing and application security assessments across diverse platforms (web, mobile, thick client, API/web services).

Strong understanding of OWASP Top 10, SANS Top 25, and secure SDLC methodologies, preferably with expertise in banking or financial services application security.

Able to manage complex security issues, lead DAST initiatives, collaborate to resolve security challenges and deliver high-quality engagements within expected timelines.