Sr Engineer- Security focused

Role Overview :

We are looking for a hands-on Senior Software Engineer with strong security expertise to help us remediate vulnerabilities, harden systems, and embed security into our code and infrastructure.

This is not a governance, audit, or compliance role. It's a highly technical fixer-builder position for someone who enjoys rolling up their sleeves and working directly in codebases, scripts, and systems.

What You'll Do

Code Remediation

o Dive into existing application code (Java, Python, C#, or similar) and directly fix vulnerabilities.

o Apply secure coding practices and improve the security posture of existing systems.

System & Infrastructure Hardening

o Write and update Linux shell scripts for automation, patching, and hardening.

o Secure servers, containers, and CI / CD pipelines.

o Improve configurations and enforce least-privilege access.

Cloud & Container Security

o Remediate vulnerabilities in Docker / Kubernetes environments.

o Secure cloud resources (primarily Azure; AWS / GCP a plus).

o Work with cloud-based vaults (Azure Key Vault, AWS KMS, HashiCorp Vault) for secrets and key management.

Troubleshooting & Problem Solving

o Investigate audit / pen-test findings and implement practical, working fixes.

o Proactively poke at systems, detect weaknesses, and remediate them.

What We're Looking For

7+ years of experience as a software engineer with direct coding experience.

Strong ability to fix security issues in application code.

Proficiency with Linux administration and scripting (bash, Python, etc.).

Experience securing Docker / Kubernetes environments.

Familiarity with Microsoft Azure security services (IAM, Key Vault, policies).

Knowledge of secure SDLC, DevSecOps, and common attack vectors (OWASP Top 10, container escapes, privilege escalation).

Someone who thrives in a hands-on role - not just consulting or advising.

Nice-to-Haves

Familiarity with AWS or GCP.

Experience with Terraform, Ansible, or CloudFormation.

Security certifications (OSCP, OSWE, CISSP, etc.) are optional - we care more about skills than acronyms.