Senior Information Security Engineer

Senior Engineer – Information Security

Company: Colombo Stock Exchange

Grade: Senior Executive Grade

Key Responsibilities

• Conduct VAPT and security assessments of web/mobile applications, APIs, servers, databases, and network infrastructure using industry-standard tools and methodologies.
• Identify, analyze, validate, and prioritize cybersecurity vulnerabilities, providing practical remediation recommendations.
• Prepare technical assessment reports and present key findings to relevant stakeholders.
• Coordinate with systems owners, developers, and infrastructure teams to ensure timely remediation and verify closure of identified vulnerabilities.
• Support cyber incident response by investigating security alerts, suspicious activities, and potential security breaches.
• Proactively identify information security risks and support the implementation of secure architectures and cybersecurity solutions.
• Review new projects, system implementations, and technology deployments from a cybersecurity perspective.
• Monitor emerging cyber threats, vulnerabilities, attack techniques, and industry best practices, and recommend appropriate security improvements and risk mitigation measures.

Key Requirements

• Minimum 3 years of hands-on Information Security experience, including at least 2 years in VAPT.
• Strong hands-on experience in manual and automated vulnerability assessments, penetration testing, and threat hunting.
• Proficiency in vulnerability assessment tools such as Burp Suite, Nexpose, Qualys, and similar industry-standard tools.
• Knowledge of DevSecOps practices and integrating security into development and deployment processes.
• Professional certifications such as OSCP, PNPF, eJPT, Cloud Security, or other relevant Information Security certifications will be an advantage.
• Bachelor's degree in Information Technology, Engineering, Cyber Security, or a related discipline from a recognized university, and/or equivalent qualification.
• Strong analytical, communication, teamwork, organizational, and problem-solving skills, with a proactive and positive approach.