SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Thndr is a fintech platform democratizing investment access across the MENA region, with 5.5M app downloads and EGP 1B+ average daily traded value. This Senior Cyber Security Engineer / DevSecOps role is a highly collaborative position embedded within product, engineering, and infrastructure teams to champion security architecture from the ground up.
You will work closely with product and engineering teams to review features and suggest security improvements, drive secure software development lifecycle (S-SDLC) practices, and review security acceptance criteria and threat modeling. You'll guide and train the team on security checks and best practices, perform pre- and post-deployment security penetration tests, and plan regular web, mobile, and cloud security assessments.
Key responsibilities include working with infrastructure teams on red teaming activities, defining and implementing infrastructure security measures, contributing to the security roadmap, assessing and integrating security tools, managing incident response and research, and staying current with security trends and threats. You'll support the bug-bounty program, conduct vulnerability research, improve security logging and monitoring solutions, coordinate company-wide incident response, manage vulnerability assessments for production/staging environments, and actively mentor security team members.
REQUIREMENTS:
- Bachelor's degree in Computer Science, Software Engineering, or related field (or equivalent work experience)
- Minimum 5 years of hands-on application and/or infrastructure penetration testing experience beyond running automated tools
- Highly experienced in security code reviews; Python experience is a plus
- Solid understanding of cloud platforms (AWS, Azure, or GCP) and containerization technologies (Docker, Kubernetes); serverless/lambda is a plus
- Solid understanding of software development principles, testing methodologies, and version control systems (Git)
- Hands-on experience implementing security policies across servers, storage, networks, security, virtualization, systems monitoring, and management
- Strong communication skills to articulate technical concepts to technical and non-technical stakeholders
- Solid understanding of networks and network security; Fortinet experience is a plus
- Hands-on experience managing SIEM solutions
- Knowledge of EDR, IDS, CSPM, CWPP
