Senior/Principal Security Engineer IRC303167

The project focuses on intelligent Fleet De-Carbonization to achieve net-zero emissions through a fully integrated software solution. The Security Engineer will own security activities per SSDF, collaborate with teams, and manage vulnerabilities.

• Owning and maintaining security activities required by SSDF process
• Reporting to stakeholders (Head of Engineering & CISO)
• Collaboration with SOC, Development, architects team
• Vulnerabilities management
• Solution design and requirements creation
• Supporting/advising development team in security challenges

• Knowledge of secure architecture & secure design (e.g. Zero Trust)
• Strong knowledge of cybersecurity processes – SSDF by NIST
• Cross-team collaboration
• Experience Azure cloud: Azure Kubernetes security, Azure IdP (Entra & B2C), Azure Pipelines
• Experience with scanning tools: SonarCloud & Snyk
• Vulnerabilities management
• Secure architecture design best practices (e.g. Zero Trust)
• Strong knowledge of secure design: Data encryption, Data anonymization, Secure communication (HTTPS – TLS, PKI), Identity and Access Management
• Scripting experience (e.g. Bash, Python, PS)