Senior Security Engineer

Zepz is dedicated to breaking down barriers for cross-border communities through innovative finance and technology solutions. The Senior Security Engineer will enhance security operations, focusing on incident response and vulnerability management, while collaborating with various teams to promote a security-first culture.

Responsibilities:

• Respond to security incidents in a timely and effective manner
• Investigate security incidents to identify root causes and prevent future incidents
• Communicate with stakeholders throughout the incident response process
• Create run books for common scenarios to improve consistency and prepare for automation
• Review tooling and processes and automate wherever possible leaning on the ability of the SIEM to integrate to 3rd party APIs and follow workflow to enrich data as well as automatically close some incidents
• Manage threat and vulnerability management
• Keep abreast of emerging threats & vulnerabilities
• Own the vulnerability reporting services and manage vulnerability team remediation metrics building relationships and influencing remediation outcomes through robust processes including reporting and risk management
• Improve stakeholder collaboration & influence
• Partner with engineering, operations, and business teams to foster a security-first culture
• Improve security education and awareness campaigns by leading multi disciplinary and multi media messaging campaigns
• Strive for continuous improvement
• Stay updated with the latest developments in security operations and incident response

Requirements:

• Good security fundamentals e.g. networking, authentication, operating systems, cloud, encryption
• Experience responding to incidents including EuC, public cloud server infrastructure and containerised environments
• Experience of scripting and automation
• Experience with SIEM and EDR tools
• Familiarity with Infrastructure as Code tools (e.g., Terraform, CloudFormation)
• Familiarity with cyber security frameworks e.g. NIST