Job Openings
Security Engineer
Information Technology - GambiaAbout the Role
We are seeking a dedicated and skilled Security Engineer to enhance our security efforts across infrastructure, application, and product domains. In this role, you will drive the implementation of advanced cybersecurity measures, identify and mitigate risks, and spearhead security automation initiatives. You will also collaborate closely with engineering teams to integrate security into the software development lifecycle, ensuring our products and applications remain secure by design. This is an exciting opportunity to shape and evolve the security program for a dynamic organisation.Key Responsibilities Infrastructure Security:
- Design, implement, and maintain security measures for cloud-native environments, including serverless and containerised infrastructure.
- Utilize AWS security tools and open-source solutions to ensure infrastructure protection.
- Manage Identity and Access Management (IAM) through Infrastructure as Code (IaC).
- Enforce security baselines, such as PCI DSS and CIS AWS benchmarks.
Operational Security and Incident Response:
- Implement and manage SIEM solution for log aggregation, threat detection, and response.
- Develop and maintain security investigation use cases and Incident Response playbooks.
- Integrate threat intelligence to identify and mitigate advanced threats.
- Automate operational security processes to enhance efficiency and detection capabilities.
- Be the first responder for Security Incidents
Application and Product Security:
- Perform security assessments of web, mobile applications, and APIs.
- Collaborate with engineering teams to integrate secure coding practices and vulnerability management into the development lifecycle.
- Manage application security tools within CI/CD pipelines and optimize Web Application.
- Firewall (WAF) configurations.
- Conduct periodic penetration tests and secure configuration reviews for infrastructure and applications.
Risk Management and Compliance:
- Conduct risk assessments, identify security gaps, and develop mitigation strategies.
- Collaborate on compliance efforts, including PCI DSS, PCI-PIN and SOC 2.
- Ensure security programs align with industry frameworks and organisational requirements
Operational Security and Incident Response:
- Implement and manage SIEM solution for log aggregation, threat detection, and response.
- Develop and maintain security investigation use cases and Incident Response playbooks.
- Integrate threat intelligence to identify and mitigate advanced threats.
- Automate operational security processes to enhance efficiency and detection capabilities.
- Be the first responder for Security Incidents
Skills and Experience Required
Technical Expertise:
- Bachelor's Degree in Information Security, Computer Science, Networking or computer-related studies
- Proficiency with AWS security services, open-source security tools, and IaC principles.
- Strong experience in SIEM management, log analysis, and incident response.
- Advanced knowledge of application security best practices, including OWASP Top 10 and secure SDLC.
- Broad exposure to various cybersecurity domains, including infrastructure security, application security, compliance, and operational security.
- Resourceful and creative problem-solver, comfortable using open-source tools to achieve security objectives.
- Familiarity with PCI DSS v4.0, PCI-PIN, SOC 2, ISO 27001, NIST CSF, and OWASP SAMM.
Soft Skills:
- Excellent communication skills (written and verbal) to articulate security issues to technical and non-technical stakeholders.
- Strong collaboration skills, with the ability to work closely with engineering, product, and leadership teams.