Senior Cyber Security Engineer

Company Name: Newroz Technologies Limited

Location: Dhaka

Job Type: Full-Time

Workplace Type: On-Site

Job ID: IJOB202674044

We’re Hiring: Senior Cyber Security Engineer Newroz Technologies Ltd. is looking for an experienced, hands-on Senior Cyber Security Engineer to strengthen security across our applications, APIs, cloud infrastructure, production systems, and fintech/payment platforms.

This is not a purely governance or compliance-focused position. We are looking for someone who can identify vulnerabilities, perform technical security assessments, investigate incidents, work directly with engineering teams, and drive remediation through closure.

Key Responsibilities

• Perform security assessments of web applications, mobile applications, APIs, and backend services
• Identify and validate vulnerabilities including OWASP Top 10 and OWASP API Security Top 10
• Conduct secure code reviews and advise engineering teams on secure development practices
• Perform Vulnerability Assessment & Penetration Testing (VAPT)
• Review authentication, authorization, OAuth2, JWT, session management, and access-control implementations
• Perform threat modelling and security architecture reviews
• Assess AWS/cloud environments for security vulnerabilities, misconfigurations, and architectural risks.
• Review IAM, VPC, Security Groups, WAF, S3, EC2, EKS, RDS, encryption, secrets, logging, and privileged access.
• Design and implement cloud and on-premise security hardening, including least privilege, network segmentation, secure configurations, patching, access controls.
• Work with AWS security services such as CloudTrail, GuardDuty, Security Hub, Config, KMS, IAM Access Analyzer, and CloudWatch.
• Partner with SRE/DevOps and engineering teams to embed security into cloud infrastructure, IaC, and CI/CD.
• Investigate suspicious activities, security alerts, and potential security incidents
• Support incident containment, eradication, recovery, root-cause analysis, and post-incident reporting
• Maintain vulnerability registers and track remediation through closure
• Integrate SAST, DAST, SCA, and secret scanning into CI/CD pipelines
• Strengthen GitHub/repository security, branch protection, secrets management, and developer access
• Conduct periodic privileged-access and production-access reviews
• Support security requirements related to digital wallets, payment platforms, merchant systems, and financial APIs
• Support PCI DSS, ISO 27001, SOC 2, and relevant security/compliance requirements
• Work closely with Engineering, DevOps, QA, Product, PMO, Compliance, and Management

Required Experience & Skills

• 5–8 years of professional cybersecurity experience
• At least 3 years in hands-on security engineering or application security
• Strong knowledge of:
• Application & API Security
• OWASP Top 10 / OWASP API Security Top 10
• Vulnerability Assessment & Penetration Testing
• Network and Infrastructure Security
• AWS / Cloud Security
• IAM, MFA, OAuth2, JWT and SSO
• DevSecOps and Secure SDLC
• Incident Response
• Cryptography and Secrets Management
• Hands-on experience with tools such as:
• Burp Suite
• OWASP ZAP
• Nmap
• Nessus / OpenVAS
• SAST / DAST / SCA tools
• SIEM / monitoring platforms such as Splunk, Elastic, Wazuh, Sentinel or equivalent
• Working knowledge of Linux and Windows security
• Ability to write or understand automation scripts using Python, Bash, PowerShell, or similar technologies
• Good understanding of databases, APIs, networks, and secure data handling
• Strong written and spoken English communication skills

Highly Preferred Experience in one or more of the

Following Will Be a Strong Advantage

• Fintech
• Banking
• Payment gateways
• Digital wallets
• Financial APIs
• Merchant/payment systems
• PCI DSS
• AWS production environments
• Production incident response

Preferred Certifications Any of the following certifications will be considered an advantage:

CISSP

• CISM
• OSCP
• CEH
• Security+
• CySA+
• PenTest+
• eJPT
• eWPT
• AWS Certified Security – Specialty
• ISO 27001 Lead Implementer / Lead Auditor
• GIAC

What We Expect At Senior Level We expect the successful candidate to be able to independently:

• Identify and validate security risks
• Distinguish theoretical vulnerabilities from realistically exploitable risks
• Prioritize findings based on severity, exploitability, and business impact
• Investigate complex security incidents
• Recommend practical remediation instead of only reporting findings
• Work directly with developers and DevOps engineers to close vulnerabilities
• Assess architectural and cloud-security risks before production deployment
• Communicate critical security risks clearly to both engineers and management
• Handle sensitive security information with a high level of confidentiality and professional judgment

Position Details

Position: Senior Cyber Security Engineer

Department: Technology / Information Security

Employment Type: Full-Time

Company: Newroz Technologies Ltd.

Interested candidates are encouraged to apply with their updated CV.

We are looking for security engineers who can go beyond identifying problems—understand the risk, investigate the root cause, recommend the right remediation, and work with engineering teams until the issue is resolved.

Requirements

• Experience: 5 to 8 years
• Education:
• Skills: Cyber Security, Cyber Defense

Last Date of Application: 09 November 2026