Senior Cyber Security Engineer

About the role

Sucafina seeks a senior technical owner for its cybersecurity controls, focusing on application security, audit, and compliance across a global coffee supply chain.

Key responsibilities

• Embed security into the SDLC, conduct threat modelling, secure code reviews and remediation.
• Scope and manage internal and third‑party penetration tests, driving findings to closure.
• Lead internal and external security audits, customer assessments and certification cycles (ISO 27001, NIST CSF, CIS, SOC 2).
• Maintain vulnerability management, SIEM monitoring, EDR/XDR administration and incident response playbooks.
• Administer Fortinet FortiGate firewalls, VPNs, IPS and web filtering.
• Define Azure hardening baselines, manage IAM, MFA, SSO and privileged access.
• Set data protection standards for encryption, key management, classification and DLP.

Required profile

• Degree in Computer Science, Information Security or Engineering, or equivalent experience.
• 6‑8+ years in cybersecurity, including senior or lead roles.
• Hands‑on experience with application security, security audits and compliance frameworks.
• Preferred certifications: CISSP, CISM, CISA, CSSLP, ISO 27001 Lead Auditor, Fortinet NSE 4+, OSCP, SC‑200.

Required skills

• Application security (SDLC, threat modelling, SAST/DAST/SCA, OWASP Top 10).
• Vulnerability management and patching cycles.
• SIEM (Forti SIEM) log onboarding, use‑case creation and alert tuning.
• EDR/XDR platforms (Defender for Endpoint, CrowdStrike).
• Fortinet FortiGate firewall administration (policies, IPS, VPN, FortiManager, FortiAnalyzer).
• Cloud security on Azure, including hardening baselines.
• Identity & Access Management, MFA, SSO, privileged access reviews.

What we offer

• Pleasant family environment with multicultural exposure.
• Opportunities to learn, grow and take on challenging projects.
• Merit‑based compensation.
• Free coffee available around the clock.