Senior Engineer, Cyber Security Engineering; SWCoE

Senior Engineer, Cyber Security Engineering (SWCoE)

The job responsibilities outlined in this document are not exhaustive and may evolve over time and be reviewed according to business needs.

In this position you will be responsible for integrating security practices into the software development lifecycle. Your primary focus will be on ensuring the security of applications through both static and dynamic code analysis but also ensuring that the application is designed by following system security concepts, standards and best practices. You will manage and advise several projects and Biz Dev Ops  teams to deliver resilient zero trust solutions in a diverse and fast‑paced environment, ensuring secure application design and adequate security controls are in use.

Work in close collaboration with the Software Center of Expertise (SWCoE) and software development teams to integrate security seamlessly into the development process. Identify critical areas for security implementation and ensure adherence to secure coding practices.

• Conduct thorough analysis of code vulnerabilities using both static and dynamic analysis tools. Identify, document, and prioritize vulnerabilities, and work with development teams to remediate them.
• Automate security controls, data protection, and vulnerability management systems within deployment pipelines. Develop and implement automation scripts to enhance security testing and monitoring.
• Develop, document, and disseminate security best practices, standards, and guidelines for software development. Conduct training sessions and workshops for development teams on secure coding practices and threat modeling.
• Work closely with cross‑functional teams, including development, operations, and security, to ensure a cohesive approach to security throughout the software development lifecycle.
• Stay updated with the latest security trends, vulnerabilities, and technologies. Continuously improve security processes and tools to enhance the overall security posture of the organization.
• Translate advanced security requirements into comprehensive, effective and efficient technical security concepts in line with industry and governmental security standards that effectively mitigate security related risks, threats and vulnerabilities while accommodating complex operational needs in complex hybrid infrastructures. Autonomously lead complex cyber security implementation projects as laid out in SES's information security strategy and deliver them within time, cost and scope.

• Independent, passionate and self‑motivated with proven ability to deliver on complex and time critical tasks/projects.
• Effective project management skills, able to handle multiple projects simultaneously and steer cross‑functional and/or virtual project teams.
• Strong analytical skills and stress resistance.
• Innovative, result, solution and stakeholder‑oriented mindset.
• Strong ability to overcome resistance to change, mediate in conflicts and resolve issues, and to secure stakeholder buy‑in to the proposed solution.
• Proficient written and verbal communication skills: ability to explain security rationales and controls to non‑technical audiences.
• Passionate team player, motivated to work in an international environment, collaborating with inter‑disciplinary teams.
• Versatile and able to grasp new concepts and technologies quickly.

• Degree in Computer Science or Software Engineering and a minimum of 5 years of experience with a strong focus on security and Dev Ops practices.
• Proficiency in various Dev Sec Ops  toolkits. Familiarity with information security frameworks and standards.
• Knowledge of attacker techniques and how to mitigate them in complex environments.
• Experience with Dev Ops automation tools such as Terraform, Git Hub Actions, and CI/CD pipelines.
• In‑depth knowledge of static and dynamic code analysis tools, vulnerability management, and secure software development practices.
• Strong analytical and problem‑solving skills, with the ability to identify and mitigate security risks effectively.
• Security…