Y-Axis Jobs Logo
Send us feedback
telephone  +91 7670 800 001
Log in Sign up Try Premium
Information Security Engineer at ProgressSoft
Amman, Amman, Jordan -
Full Time

Start Date

Immediate

Expiry Date

22 Aug, 26

Salary

0.0

Posted On

24 May, 26

Experience

0 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

No

Skills

Application Security, Java Code Review, Threat Modeling, Vulnerability Assessment, OWASP Top 10, Penetration Testing, SAST, DAST, SCA, Cloud Security, Incident Response, DevSecOps, CI/CD Pipeline Security, Burp Suite, OWASP ZAP, Secure Coding

Industry

IT Services and IT Consulting

Description
We are looking to hire an Information Security Engineer who will work closely with developers, DevOps, and infrastructure teams to enhance the security of our products and platforms. This role is ideal for individuals who are passionate about security and eager to grow in a collaborative and fast-paced environment. Responsibilities: Perform application security reviews, including Java code review, threat modeling, and vulnerability assessments. Identify and remediate security vulnerabilities in web, API, and mobile applications, with a focus on OWASP Top 10 risks. Collaborate with developers to integrate security best practices into the SDLC and CI/CD pipelines. Conduct penetration tests and manage third-party security assessments. Develop and enforce secure coding standards for Java and related frameworks. Support automation of security testing tools (SAST, DAST, SCA). Implement and maintain security controls across servers, cloud environments, and networks. Support vulnerability management, patching, and configuration hardening. Monitor for security threats, investigate incidents, and support incident response. Requirements Minimum 1 year of professional experience in security (application or infrastructure). OR relevant certification such as OSCP, OSWE, or equivalent. Strong understanding of application security principles (OWASP Top 10, secure coding, threat modeling). Familiarity with tools like Burp Suite, OWASP ZAP, SAST/DAST scanners, etc. Excellent problem-solving skills and ability to communicate technical findings clearly. Nice-to-Have Familiarity with Java-based applications and common frameworks (e.g., Spring). Experience with DevSecOps and CI/CD pipeline security. Familiarity with infrastructure/cloud security.
Responsibilities
The role involves performing application security reviews, threat modeling, and vulnerability assessments for web, API, and mobile applications. The engineer will also integrate security best practices into the SDLC and maintain security controls across cloud and network environments.