Security Engineer

About the role

Baly, Iraq's leading super‑app, is seeking a Security Engineer to protect its cloud‑based applications, infrastructure, and customer data. You will work closely with software, infrastructure, and DevOps teams to identify vulnerabilities, respond to incidents, and embed security throughout the development lifecycle.

Key responsibilities

• Conduct application security testing, vulnerability assessments, and code reviews.
• Identify security risks and collaborate with engineering teams to implement remediation plans.
• Monitor cloud environments for suspicious activity and respond to security incidents.
• Manage the vulnerability lifecycle across cloud infrastructure, APIs, and microservices.
• Develop and maintain security policies, standards, and best practices.
• Support secure software development by promoting security throughout the development lifecycle.
• Assist in improving cloud security controls and infrastructure protection.
• Document security findings, recommendations, and incident reports.

Required profile

• Bachelor's degree in Computer Science, Information Security, Cyber Security, or a related field.
• 1–3 years of experience in Cyber Security, Application Security, DevOps, or a related discipline.
• Strong analytical, problem‑solving, and communication skills.
• Ability to explain technical security concepts to both technical and non‑technical stakeholders.

Required skills

• Cloud platforms: AWS or GCP.
• Scripting languages: Python, Bash, JavaScript/TypeScript.
• Application security testing and vulnerability management.
• Knowledge of OWASP Top 10.
• Experience with CI/CD pipelines, Docker, Kubernetes, and DevSecOps practices.
• Familiarity with SIEM, log management, and Cloud Security Posture Management (CSPM) tools.
• Relevant certifications (e.g., CompTIA Security+, CEH, AWS Certified Security, GCP Professional Cloud Security Engineer) are a plus.