Senior Cyber Security Engineer / DevSecOps

Thndr; Sofia (NM); On-site; USD 120,000 - 190,000; Full time

Job summary

Thndr is seeking a Senior Cyber Security Engineer/DevSecOps to bridge offensive and defensive security within product, engineering, and infrastructure teams. You will champion security by building secure architecture from the ground up and driving the S-SDLC across cycles.

You will review features for security, guide team adoption of security best practices, and perform regular security assessments, pen tests, and incident response. Strong cloud and container skills are essential.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or a related field (or equivalent work experience).
• 5+ years of experience performing application and/or infrastructure penetration testing beyond automated tools.
• Security code reviews experience; Python a plus.
• Solid understanding of cloud platforms (AWS, Azure, or GCP) and containerization (Docker, Kubernetes); serverless/Lambda a plus.
• Strong knowledge of software development principles, testing methodologies, and Git.

Responsibilities

• Collaborate with product and engineering to review features and enhance security.
• Drive secure development lifecycle and threat modeling.
• Mentor team members on security practices.
• Conduct pre/post-deployment security tests, pen tests, and security assessments.
• Implement and monitor infrastructure security measures and logging/monitoring.

Skills

Threat modeling

Security architecture

Penetration testing

Code review

Python

Cloud security

Containerization

Communication

SIEM management

Education

Bachelor's degree in Computer Science or related

Tools

Docker

Kubernetes

Fortinet

SIEM solutions

EDR/IDS/CWPP

Job description

About The Role

This Senior Cyber Security Engineer / DevSecOps role is a highly collaborative position designed for a security professional who can seamlessly bridge the gap between offensive exploitation and defensive engineering. Instead of sitting in a silo, you will be deeply embedded within the product, engineering, and infrastructure teams to champion security architecture from the ground up.

What You'll Do

• Work closely with the product and engineering teams to review new features and suggest new features that improve security.

• Drive S-SDLC in our cycles and review security acceptance criteria and threat modeling.

• Guide and train the team to cover security checks and security best practices.

• Perform pre-deployment and post-deployment security penetration tests.

• Plan and execute regular web, mobile, and cloud security assessments and pen tests.

• Work closely with the Infrastructure teams to identify security issues through red teaming activities.

• Define, implement, and monitor infrastructure security measures.

• Contribute to the security roadmap & backlog.

• Assess security tools and integrate tools as needed.

• Incident Response & Research.

• Follow new security news, trends, tools, and incidents and drive needed changes.

• Support in managing our Bug-bounty program and security channels.

• Conduct vulnerability research against company assets.

• Work on understanding and improving our security logging and monitoring solutions.

• Coordinate company-wide response to security incidents till remediation.

• Vulnerability management for production/staging environments.

• Actively mentor members of the security team.

What You'll Need

• Bachelor's degree in Computer Science, Software Engineering, or a related field (or equivalent work experience).

• Minimum 5 years of experience performing application and/or infrastructure penetration testing experience above and beyond running automated tools.

• Highly experienced in performing security code reviews; Python experience is a plus.

• Solid understanding of cloud platforms (AWS, Azure, or GCP) and containerization technologies (Docker, Kubernetes), serverless / lambda as a plus.

• Solid understanding of software development principles, software testing methodologies, and version control systems (e.g., Git).

• Hands-on experience implementing security policies in various environments (servers, storage, networks, security, virtualization, systems monitoring, and management).

• Strong communication skills and the ability to effectively articulate technical concepts to technical and non-technical stakeholders.

• Solid understanding of networks and network security (experience in Fortinet is a plus).

• Hands-on experience in managing SIEM solutions.

• Knowledge in EDR, IDS, CSPM, CWPP.

Who Are We?

Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we’re shaping the future of investing while actively driving the economies we serve by promoting local investment products.

History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:

• High barriers to entry — In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.

• Irrelevant experience — Catered toward expert traders and financial specialists, therefore alienating the majority of the population.

• Fragmented offering — Investment products were not gathered in a single, intuitive outlet.

We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:

• 5.5 million app downloads

• EGP 1B+ average daily traded value across 2025

• #1 digital investing platform in Egypt for the third consecutive year

• 76% of users are first-time investors

• 40% of our users come from outside of capital cities and have previously had limited access to financial institutions

Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.

Rumble was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry’s top experts.

Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.

At Thndr, we're looking for people driven by our mission to help us democratize investing across the MENA region.