Principal Software Engineer – Security Consultant
Principal Software Engineer – Security Consultant
ROLE
– Assessing, designing, implementing, and maintaining information security controls to protect organizational systems, networks, and data.
– Conducting security risk assessments, vulnerability assessments, and threat modelling across applications, infrastructure, and networks.
– Identifying security gaps and providing risk-based mitigation recommendations.
– Performing periodic security posture reviews and maturity assessments.
– Designing and reviewing secure architecture for applications, cloud, and on-premise systems.
– Ensuring security-by-design principles are embedded in system development and integration.
– Reviewing technical designs to ensure alignment with security standards and best practices.
– Supporting secure coding practices and reviewing source code for vulnerabilities.
– Assessing infrastructure security including servers, databases, networks, and endpoints.
– Implementing and reviewing cloud security controls for AWS, Azure, or GCP environments.
– Ensuring secure configuration, identity access management, and logging in cloud platforms.
– Supporting security incident detection, response, and investigation activities.
– Performing root cause analysis and recommending corrective and preventive actions.
– Coordinating with SOC, IT, and business teams during security incidents.
– Supporting internal and external security audits and risk assessments.
– Developing and maintaining security policies, standards, and procedures.
– Providing security guidance to development, infrastructure, and business teams.
– Conducting security awareness sessions and training programs.
– Acting as a trusted advisor on security best practices and emerging threats.
– Staying updated with latest cyber security threats, vulnerabilities, and trends.
– Preparing security assessment reports, dashboards, and risk summaries for management.
– Recommending continuous improvements to enhance organizational security posture.
REQUIREMENTS
– Qualification: Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or related field.
– Years of Experience: Minimum 5 years to 8 Years
– Job Skill Requirement:
– Strong knowledge of cyber security principles, tools, and frameworks.
– Hands-on experience with vulnerability assessment and penetration testing tools.
– Experience in application, infrastructure, and cloud security.
– Knowledge of security compliance and regulatory standards.
– Understanding of networking, operating systems, and databases.
– Strong documentation, reporting, and stakeholder communication skills.
– Good command of written and spoken English is essential.
