Senior SecOps Engineer

Required Skills

• Proven experience in information security, with a background in security operations,

application security, or related roles.

• Skilled in identifying, analyzing, and handling phishing attempts and other social

engineering threats.

• Strong knowledge of modern web application security practices and frameworks.
• In-depth understanding of the Secure Software Development Life Cycle (SSDLC).
• Experience implementing security automation for testing, monitoring, or orchestration

workflows in Typescript or similar.

• Proficiency in container technologies, such as Docker and Kubernetes, and serverless

environments like AWS Lambda, with hands-on experience securing cloud-based

applications, preferably in AWS.

• Knowledge of securing microservices-based architectures.
• Practical experience conducting security assessments, including Static Application

Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software

Composition Analysis (SCA).

• Experience managing vulnerabilities through bug bounty programs, penetration testing,

and automated security scanning.

• Understanding of security and privacy frameworks, such as GDPR, ISO 27001, and SOC 2,

is an asset.

• Strong English communication and presentation abilities, with the capacity to explain

complex security concepts to both technical and non-technical audiences.

Nice to have:

• Experience in a DevSecOps role
• Experience with Incident Response
• Experience with Forensics
• Achieved certifications like f.e OSCP, CISSP, CEH or AWS Security Specialty