Senior Information Security Engineer

About the role

The Senior Information Security Engineer will ensure that the organization’s applications and data are protected according to industry‑best security standards. Acting as the subject‑matter expert, you will lead secure‑code initiatives, perform vulnerability testing, and validate security across all environments.

Key responsibilities

• Perform scheduled penetration testing of company applications.
• Conduct white‑, gray‑ and black‑box security assessments.
• Support JVs and subsidiaries in implementing a Secure Software Development Lifecycle.
• Execute mobile services security assessments.
• Monitor environments using existing tools or develop internal solutions for advanced threat detection and response.
• Carry out security vulnerability and impact assessments on electronic assets.
• Assess security of ERP systems and other on‑premise solutions.

Required profile

• Ability to lead direct and indirect resources.
• Strong communication skills to explain technical challenges to non‑technical audiences.
• Capability to quantify risk and impact vectors.
• Certified Ethical Hacker or equivalent offensive/defensive security certification.
• Bachelor’s degree in Information Security or Computer Engineering.
• 10+ years of experience in cybersecurity, with system, network, and/or application background.
• Product development experience is a plus.

Required skills

• Penetration testing.
• Vulnerability assessment.
• Application security.
• Infrastructure security.
• Scripting capability.
• Strong understanding of ISO 27000 standards.
• Experience with open‑source security tools.