Senior Product Security Engineer / Product Security Manager

The Senior Product Security Engineer will serve as a technical leader within the Product Security team, driving security assessments, threat modeling, and security architecture reviews across all products and services. This role requires deep expertise in offensive security techniques and the ability to collaborate cross-functionally with development, DevOps, Cyber Defense and architecture teams

• 4+ years of experience in Application Security, Product Security, or Penetration Testing roles.

• Demonstrated experience leading security initiatives and acting as a subject matter expert.

• Relevant certifications preferred: OSWE, OSEP, CAPE, OSCP, BSCP, CRTE, CRTO, AWS Security Specialty, or equivalent.

• Scripting proficiency in Python, Bash, or PowerShell for security automation tasks.

• Understanding of container and Kubernetes security concepts.

• Understanding of frameworks such as MITRE ATT&CK, MITRE ATLAS, and the Cyber Kill Chain.

• Opportunity to learn through working
• Familiarity with a real banking environment
• Gaining practical knowledge and experience
• Development of communication and customer service skills
• Improving teamwork abilities
• Support from a professional mentor
• Chance to build a future career at Bir Ecosysem

• Lead application security assessments, threat modeling sessions, and architecture reviews for products and services.

• Perform comprehensive penetration testing across web, mobile, API, and infrastructure environments.

• Conduct SAST, DAST, and SCA analysis; fine-tune scanning tools and integrate findings into development workflows.

• Collaborate with development teams to embed security controls within CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins).

• Work with DevOps teams to assess and improve cloud security posture across AWS, GCP, and Azure.

• Investigate and respond to product security incidents and vulnerability reports.

• Define and enforce secure coding practices, security guidelines, and standards across engineering teams.

• Mentor mid and junior level security engineers and contribute to the growth of the Product Security team.

• Produce detailed security assessment reports and executive-level summaries. 

Kapital Bank iş mühiti, əlavə fürsətlər və digər vakansiyaları görüntüləmək üçün Kapital Bank Life səhifəsinə keçid edin.