Security Engineer

Design, develop, and maintain security systems, tools, and best practices across the stack (frontend, backend, mobile, and infrastructure).

Identify, assess, and mitigate security vulnerabilities through proactive risk management and threat modeling.

Collaborate with product managers and developers to embed security into the software development lifecycle (SDLC).

Develop and enforce policies for secure coding, data protection, and incident response.

Implement robust authentication and authorization mechanisms.

Conduct regular security assessments, including penetration testing and code reviews.

Monitor, detect, and respond to security incidents using advanced tools and methodologies.

Enhance infrastructure security using Kubernetes, Docker, and cloud platforms (GCP, AWS).

Stay current on emerging threats, vulnerabilities, and security trends, and recommend actionable insights to improve defenses.

Champion security awareness across the organization, including training sessions and knowledge-sharing activities.

Ensure compliance with relevant security standards and regulations such as ISO 27001, PDPA, GDPR, SOC 2, or PCI DSS.

Basic QualificationsProven expertise in application security, cloud security, and infrastructure security.

Proficiency in securing systems built with technologies such as , Golang, Elixir, Python, React, Svelte, or Flutter.

Experience with tools like Docker, Kubernetes, and cloud services (GCP, AWS).

Strong understanding of cryptographic principles and secure communication protocols.

Familiarity with CI/CD pipelines and secure DevOps practices.

Hands-on experience with security tools for vulnerability scanning, penetration testing, and threat detection.

Deep understanding of database security, especially with PostgreSQL or other relational or non-relational databases.

Strong analytical and problem-solving skills with a security-first mindset.

Excellent communication skills and the ability to collaborate effectively in Agile teams.

Self-motivation, adaptability, and a strong work ethic.

Preferred Qualifications We re especially excited if you bring: Experience leading security initiatives or mentoring other engineers in security best practices.

Expertise in compliance frameworks such as ISO 27001, PDPA, GDPR, SOC 2, or PCI DSS.

Advanced knowledge of security monitoring and incident response systems.

Strong system design skills with a focus on secure architectures and long-term trade-offs.

A proven track record of securing fast-paced, high-growth tech environments.

A passion for securing user-centric products and contributing to their success.

Perks & Benefits Flat Structure As we continue to grow fast, we strive to retain our culture where everyone is heard, contributes, and grows with the company..

Work-life Harmony We believe that quality time outside of work is important to sustaining a healthy and happy lifestyle.

Remote Work Hybrid-mode activated It comes with the package: flexibility, focus and productivity.

Urban Office One breath from Phrom Phong BTS. No sweat whatsoever The office should also feel like a second home so we dedicated a lot of care and resources into building the best environment for you to wake up to every morning.

Fun Workshop The best relationships are built over new experiences, that s why we have workshops filled with a range of activities for you to look forward to and enjoy.

Game Tournament It s getting fun and competitive Challenge doesn t only have to come from work. Own the championship and show the peeps how great of a gamer (and player) you are.

Group Insurance Health comes first, we know, don t worry, we ve got you covered.

Health & Wellness Only a healthy army wins the war. We invest to take care of you from physical, mental and happiness-level. Adopted health & wellness applications plus activities to make sure everyone here is on cloud nine

Job skills required: Risk Management, Docker, Kubernetes

Job skills preferred: , Compliance, ISO 27001