Security Engineer

About RedCloud
RedCloud is leveraging AI-powered technology to break down the barriers to fair and profitable trade in emerging markets.
RedCloud's Intelligent Open Commerce Platform connects FMCG Brands, Distributors, and Local Merchants on a single, equitable marketplace, empowering them with real-world insights and data to help them make better decisions. RedCloud enables FMCG Brands to seize new opportunities in emerging markets, facilitates access to more buyers & streamlines operations for Distributors, and helps Local Merchants spend more time selling products, not searching for them.
The company comprises a highly diverse, dynamic team of driven talented people from over twenty different countries, speaking multiple languages, with a physical footprint in Africa, Europe, and Latin America.
The role:
We are seeking a highly skilled and talented Security Engineer and Hacker to join our team. As a top tier professional, you will play a critical role in planning and executing offensive engagements, demonstrating exceptional technical prowess and expertise in hacking and security assessments.
Responsibilities:
Application Security Assessments: Conduct thorough security assessments of applications, including vulnerability assessments, penetration testing, and code reviews to identify and address potential security weaknesses.Secure Software Development: Collaborate with development teams to integrate security practices into the software development life cycle, ensuring secure coding techniques, security controls, and secure configuration management.Security Architecture: Design, implement, and maintain secure application architectures, frameworks, and guidelines, incorporating industry standards and best practices.Threat Modelling: Conduct threat modelling exercises to identify and prioritize potential security risks, assisting in the design and implementation of effective security controls.Secure Coding Guidelines: Develop and enforce secure coding guidelines, standards, and best practices, ensuring the proper implementation of security controls within application code.Vulnerability Management: Monitor and respond to security vulnerabilities and advisories, coordinating vulnerability scanning, patch management, and remediation activities.Incident Response: Participate in incident response activities related to application security incidents, including investigations, forensic analysis, and remediation efforts.Security Awareness and Training: Develop and deliver application security training and awareness programs to promote a culture of secure coding practices among developers and stakeholders.Security Tools and Automation: Evaluate, implement, and manage security tools and automation frameworks for continuous monitoring, testing, and security verification of applications.Research and Innovation: Stay updated on emerging application security threats, technologies, and industry trends, providing recommendations for continuous improvement and innovation.
Requirements:
Expertise: Extensive experience in application security, with a deep understanding of secure coding practices, secure development methodologies, and common application vulnerabilities.Technical Knowledge: Strong knowledge of web application technologies, programming languages (such as Java, Python, or JavaScript), web frameworks, and associated security controls.Certifications: Relevant certifications such as Advanced Web Attacks and Exploitation (OSWE), or Offensive Security Certified Professional (OSCP) are highly desirable.Analytical Skills: Excellent analytical and problem-solving abilities to identify and address application security vulnerabilities effectively.Communication: Strong communication skills, both verbal and written, to effectively convey complex application security concepts to technical and non-technical stakeholders.Adaptability and Agility: Demonstrated ability to adapt quickly to changing application security landscapes, think strategically, and make sound decisions under pressure.Ethics and Integrity: High ethical standards, maintaining confidentiality and demonstrating a commitment to the organization's values and secure application development.Continuous Learning: Proactive approach to self-development, staying updated on the latest application security practices, techniques, tools, and industry trends.
Bonus Points if:
Have published CVE'sBug Bounty HunterKnows how a responsible disclosure program benefits an organisation
Benefits
Working with a pioneering provider of eCommerce solutions you will have the opportunity to join an international company who are growing massively, we encourage ambition and creativity.
Plus, you will get:
25 Days Annual leave, increasing to 26 days after 12 months in the businessPensionLife InsuranceDental coverPrivate HealthcareStock / Equity
Check out the links below to see what our CEO Justin Floyd has to say about our plans for growth for the year ahead, and to see our latest video on the mission we’re on!
RedCloud I We're growing!
RedCloud I Red101 App I Open Commerce
#J-18808-Ljbffr