We are looking for a hands-on Cybersecurity professional with 6 months to 1 year of practical experience who has already worked with real-world security tools through previous employment, internships, training, or personal projects.
This is not a theory role.
You will be responsible for implementing, enforcing, and monitoring security processes across our engineering stack. You will sit between DevOps and Developers, ensuring security is built into the system — not added later.
If you like ownership, execution, and accountability, this role is for you.
What You’ll Do (No Excuses, Real Work)
Actively run SAST & DAST scans on applications and APIs.
Implement security checks inside CI/CD pipelines (not just suggest them).
Ensure security processes are followed, flagged, and fixed — no silent bypasses.
Work directly with Developers & DevOps to close vulnerabilities.
Validate fixes and re-test until closure.
Maintain security reports, scan results, and remediation status.
Identify gaps in current security workflows and help improve them.
Own security hygiene and make sure it doesn’t slip.
What We Expect (Must-Have)
Proven hands-on experience with SAST / DAST through:
Internships
Industry training
Academic or personal security projects
Working knowledge of application security processes.
Familiarity with OWASP Top 10 vulnerabilities.
Understanding of CI/CD pipelines and how security fits into them.
Ability to read scan outputs, understand risks, and communicate fixes clearly.
Strong follow-through mindset — issues are tracked until resolved.
Comfortable calling out when processes are not being followed.
Good to Have (Robust Advantage)
Hands-on exposure to tools like:
OWASP ZAP, Burp Suite
Snyk, SonarQube, Trivy
Basic knowledge of cloud environments (AWS/GCP/Azure).
Experience with Docker, Kubernetes, or container security.