Security Engineer (Product Security)

Join Cape, a leading telecommunications company, as a Security Engineer specializing in product security. In this role, you will collaborate with top engineers and architects to enhance our security posture and reduce risk across our cloud environments, mobile core infrastructure, and mobile applications. You will design and implement robust security controls, perform comprehensive security assessments, and integrate security practices into the DevOps lifecycle. Additionally, you will provide expert mentorship to junior security team members and collaborate with stakeholders to integrate security requirements into engineering projects.

• Design, implement, and manage robust security controls and policies within AWS, focusing on the confidentiality, integrity, and availability of data and services.
• Perform comprehensive security assessments of cloud environments to identify vulnerabilities, assess risks, and recommend actionable mitigation strategies.
• Lead the integration of security practices into the DevOps lifecycle, promoting secure development, deployment, and operational processes.
• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience), Advanced degrees or certifications (e.g., CISSP, AWS Certified Security Specialty) are advantageous
• Organized and able to manage multiple priorities in a dynamic, fast-paced environment
• Deep understanding of AWS architecture, security services, and best practices for securing cloud applications and data
• Excellent analytical skills for identifying and mitigating complex security vulnerabilities and risks
• A minimum of 5 years of experience in information security, with at least 3 years concentrated on cloud security within AWS environments
• Familiarity with containerization and microservices, particularly in securing stacks using these technologies
• Skilled in scripting languages (Python, TypeScript, Go) for the automation of security tasks and the integration of security tools
• Strong communication and leadership abilities, capable of working collaboratively across teams and effectively conveying technical information to non-technical stakeholders
• Solid knowledge of network security, encryption technologies, and secure coding practices
• Proficiency in using infrastructure as code (IaC) tools (like Terraform or AWS CloudFormation) and in automating security tasks within AWS
• Security Expertise: Experience finding and resolving security issues and vulnerabilities in code. Bug Bounty programs. Secure by design principals and working with engineers during design time
• Analytical: Collects data and information; uses critical thinking to solve problems and make sound decisions
• Collaboration & Teamwork: Builds partnerships with others to reach common goals. Able to share credit with coworkers, display enthusiasm and promote a friendly group working environment. Works closely with other departments as necessary, supports group decisions and solicits opinions from coworkers
• Dependability/Self-Management: Possesses the personal discipline and diligence necessary to keep commitments and to complete tasks. Is accountable for actions and outcomes. Makes effort to improve situations without explicit instructions; a self-starter who consciously manages his/her own time and resources
• Customer Centric: Values the importance of delivering high quality, innovative service to employees; understands the needs of the client; responds promptly and is accessible to them; follows through on commitments in a timely manner; maintains positive, long-term working relationships; assumes ownership of process issues and takes appropriate steps to mitigate problems. Gets consistently high feedback from stakeholders. Raises hand to help
• Communication: Presents information through verbal and written communication; reads and interprets complex information; listens well. Develops and delivers multi-mode communications that convey clear understanding of unique audiences
• Decision-Making: Acts quickly to solve problems and exercises good judgment by making sound and well-informed decisions. Perceives the impact and implications of decisions; makes effective and timely decisions, even when data is limited
• Flexibility / adaptability: Adjusts quickly to changing priorities, conditions, and challenges. Copes effectively with complexity and change. Is comfortable navigating ambiguity. Can handle business changes with ease and with a lack of frustration or feeling of defeat. Feels comfortable dealing with limited unknowns in an area they are well versed in
• Planning & Organization: Manages multiple projects, determines project urgency in a meaningful and practical way, uses goals to guide actions, creates detailed action plans, and organizes tasks