Security Engineer

What you will do in the role

• Secure implementation of authentication and authorisation across our applications
• Help develop and maintain security dashboards
• Tune and maintain our WAF
• Maintain our logging libraries
• Secure our SDLC particularly around our CI/CD pipeline
• Assist in making automation a first-class concept in the security team
• Assist with any other security-related operational components

What you will be measured on

• Ability to educate software engineers on application security best practice
• Your ability to work with multiple teams
• That all applications are generating well-structured and uniform logs
• That the WAF is maintained to combat the most common OWASP vulnerabilities
• Your ability to work on tasks concurrently
• Your ability to pick up other security related tasks where necessary

Who we are looking for; track record must haves

• At least one security qualification (eg. Security+)
• At least 3 years' experience in one of Ruby, Python or Javascript
• Hands-on understanding of common OWASP vulnerabilities
• Good understanding of cryptographic concepts like encryption vs hashing, TLS, RSA, Diffie-Hellman and Elliptic Curves

Experience that would be nice to have (but we’ll trade off if everything else fits)

• Tertiary education in software engineering related field.
• Familiarity with authentication and authorisation specifications like OpenID Connect and OAuth2
• Experience with AWS

The Prodigy Finance fit; attributes which run true in everyone at Team Prodigy

To be an A player at Prodigy Finance, you need to possess – in spades - the following attributes:

Innovative + Smart