IND - Senior Information Security Engineer

About the role

IND - Senior Information Security Engineer at IRIS. Own the end-to-end vulnerability management lifecycle across our products and supporting technology, from identification and validation through prioritisation.

What you'll do

• Own the end-to-end vulnerability management lifecycle across our products and supporting technology, from identification and validation through prioritisation
• Triage and validate findings from multiple sources, including SAST, DAST, SCA, secrets scanning, penetration testing and web application scanning
• Work closely with Engineering and Product teams to drive remediation of vulnerabilities, helping teams understand technical risk
• Partner with teams responsible for integrating security tooling into our CI/CD pipelines, helping improve the quality, coverage and effectiveness of that tooling
• Develop and continuously improve risk-based vulnerability prioritisation, considering exploitability, asset exposure, business criticality

What you need

• Vulnerability assessment
• Cloud security
• CI/CD
• AWS
• Azure
• Penetration testing
• Any graduate