Security Engineer

Mô tả Công việc
About the Role
We are looking for a Security Engineer to strengthen the security of UrBox's software applications and cloud infrastructure.
You will work across Application Security, AWS Cloud Security, Security Monitoring, Incident Response, and Vulnerability Management, partnering closely with Engineering and Infrastructure teams to identify risks, improve security controls, and drive remediation.
This is a hands-on role for someone who can understand technical risks, investigate security issues, and work directly with engineers to implement practical security improvements.
Main Responsibilities
1. Application Security (AppSec)
Review security designs for new features, including authentication, OTP, KYC, and payment flows.
Manage penetration testing and track remediation; work with developers to fix vulnerabilities.
Control the API attack surface, including inventory, identification of zombie/shadow APIs, and endpoint classification.
Conduct secure code reviews and provide secure coding guidance to development teams.
2. Cloud Infrastructure Security (AWS)
Manage cloud security posture through scanning, configuration assessments, and hardening.
Secure IAM and network security, including Security Groups and EKS.
Manage data encryption, including EBS and S3.
Manage secrets, logging, and audit trails, including CloudTrail.
3. Technical Monitoring & Incident Response
Operate SIEM and log monitoring tools, including Graylog, Wazuh, or equivalent; detect abnormal activities.
Investigate and handle technical security incidents.
Develop detection rules and conduct threat hunting.
4. Vulnerability Management
Conduct periodic vulnerability scanning across infrastructure, dependencies, and containers.
Prioritize and track vulnerability remediation based on risk levels.