Qureos Mentor

Tecvity

Exfiltra is hiring a Security Engineer focused on security engineering, application security, cloud security, and penetration testing. This role is designed for practitioners who enjoy working deep in systems, code, and architecture&mdash;and who take pride in building and breaking real-world environments.This is not a SOC or blue team role.Experience Required: 6 months &ndash; 1 yearWhat You&rsquo;ll Be Working On<ul><li>Application security assessments (Web, API, Mobile)</li><li>Cloud security reviews and hardening (AWS, Azure, GCP)</li><li>Infrastructure and application penetration testing</li><li>Secure architecture design and implementation</li><li>Threat modeling and security design reviews</li><li>Collaborating closely with engineering teams to embed security into the SDLC</li><li>Converting findings into clear, practical, engineering-focused remediation guidance</li></ul>Required Skills &amp; Experience<ul><li>Strong hands-on experience in application security and penetration testing</li><li>Practical exposure to cloud security (AWS, Azure, or GCP)</li><li>Ability to understand, review, and write code (e.g., Python, JavaScript, Go, Java, etc.)</li><li>Solid understanding of:</li><li>Web &amp; API security vulnerabilities</li><li>Authentication and authorization mechanisms</li><li>Secure architecture patterns</li><li>OWASP Top 10 and modern attack techniques</li><li>Comfortable going beyond tools and automation&mdash;this is a security engineering role, not a checklist-based assessment role</li></ul>Important: This position involves regular interaction with code and architecture. Candidates who are not comfortable with coding, debugging, or technical deep-dives may find this role unsuitable. Certifications (Relevant &amp; Valued)One or more of the following is strongly preferred:<ul><li>CPTS (Certified Penetration Testing Specialist)</li><li>PNPT (Practical Network Penetration Tester)</li><li>CRT (Certified Red Team)</li><li>OSCP / OSWE or equivalent hands-on certifications</li></ul>CREST certifications will be given strong preferenceAdditional Preference<ul><li>Open-source contributors (security tools, libraries, research, or write-ups)</li><li>Candidates with a strong Capture The Flag (CTF) background, including platform-based or competitive CTF participation</li></ul>Hiring ProcessThis role involves a multi-stage vetting process, designed to assess real-world skills and problem-solving ability. Candidates should expect:<ul><li>Technical interviews</li><li>Practical security discussions</li><li>A CTF-style challenge as part of the evaluation</li></ul>We take hiring seriously and evaluate depth, not buzzwords.Who Should NOT Apply<ul><li>Candidates with SOC-focused or blue team-only backgrounds</li><li>Professionals primarily seeking alert monitoring, SIEM operations, or IR-only roles</li></ul>This role is engineering-driven, not operational monitoring.How to ApplySend your CV to: hr@exfiltra.com Subject: Security EngineerIf you enjoy engineering secure systems, breaking insecure ones, and proving your skills through hands-on challenges, this role offers strong growth, autonomy, and meaningful impact at Exfiltra.Job Type: Full-timeApplication Question(s):<ul><li>What is your current salary?</li><li>What are your salary expectations?</li><li>What is your current notice period?</li></ul>Work Location: In person

Security Engineer

Join Tecvity and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Tecvity

ABOUT_COMPANY

Security Engineer