Senior Cyber Security Engineer

About the role

We are seeking a senior technical owner for our cybersecurity controls, focusing on application security, audit, and compliance. The role will embed security throughout the software development lifecycle and lead our security governance.

Key responsibilities

• Integrate security into the SDLC, perform threat modelling, secure code reviews and remediation.
• Scope and manage penetration testing for applications and infrastructure, driving findings to closure.
• Lead internal and external security audits, customer assessments and certification cycles (ISO 27001, NIST CSF, CIS, SOC 2).
• Maintain vulnerability management, SIEM, EDR/XDR platforms and network security controls (FortiGate, IPS, VPN).
• Define cloud hardening baselines for Azure and manage identity, access and data protection policies.

Required profile

• Degree in Computer Science, Information Security or related field, or equivalent experience.
• 6‑8+ years of cybersecurity experience, including senior or lead responsibilities.
• Hands‑on experience with application security, secure SDLC, and security testing tools.
• Proven track record leading audits and compliance programs.

Required skills

• Application security tools (SAST, DAST, SCA), OWASP Top 10, ASVS.
• SIEM (Forti SIEM) – log onboarding, use‑case development, alert tuning.
• EDR/XDR platforms (Microsoft Defender for Endpoint, CrowdStrike).
• Fortinet FortiGate firewall administration, FortiManager/FortiAnalyzer.
• Cloud security on Azure, CI/CD pipeline integration.

What we offer

• Pleasant family‑like environment with multicultural exposure.
• Opportunities to learn, grow and build a career in the coffee industry.
• Merit‑based compensation and free coffee around the clock.