Urbox ★ 3.5

About the Role

We are looking for a Security Engineer to strengthen the security of UrBox’s software applications and cloud infrastructure.

You will work across Application Security, AWS Cloud Security, Security Monitoring, Incident Response, and Vulnerability Management, partnering closely with Engineering and Infrastructure teams to identify risks, improve security controls, and drive remediation.

This is a hands-on role for someone who can understand technical risks, investigate security issues, and work directly with engineers to implement practical security improvements.

Main Responsibilities

1. Application Security (AppSec)

• Review security designs for new features, including authentication, OTP, KYC, and payment flows.

• Manage penetration testing and track remediation; work with developers to fix vulnerabilities.

• Control the API attack surface, including inventory, identification of zombie/shadow APIs, and endpoint classification.

• Conduct secure code reviews and provide secure coding guidance to development teams.

2. Cloud Infrastructure Security (AWS)

• Manage cloud security posture through scanning, configuration assessments, and hardening.

• Secure IAM and network security, including Security Groups and EKS.

• Manage data encryption, including EBS and S3.

• Manage secrets, logging, and audit trails, including CloudTrail.

3. Technical Monitoring & Incident Response

• Operate SIEM and log monitoring tools, including Graylog, Wazuh, or equivalent; detect abnormal activities.

• Investigate and handle technical security incidents.

• Develop detection rules and conduct threat hunting.

4. Vulnerability Management

• Conduct periodic vulnerability scanning across infrastructure, dependencies, and containers.

• Prioritize and track vulnerability remediation based on risk levels.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.
• Cyber Security, Information Security, Computer Science, Software Engineering, or equivalent.
• Able to read and understand technical English documents and security standards.
• 3–5+ years of experience in security, with a focus on Application Security and/or Cloud Security.

• Experience in fintech or e-commerce platforms is preferred.

• AWS Security certifications, OSCP, or equivalent certifications are preferred.

• Strong knowledge of AWS Cloud Security, including IAM, EKS/container security, network security, encryption, and scanning tools such as Prowler or equivalent.

• Strong knowledge of Application Security, including OWASP Top 10 and ASVS, with a deep understanding of vulnerabilities such as SSRF, injection, IDOR, and insecure authentication/OTP design.

• Experience with SIEM and log analysis using Graylog, Wazuh, or equivalent tools.

• Ability to read and understand code and work directly with developers on vulnerability remediation.

• First-principles thinking and the ability to independently analyze technical security risks.

• Ability to translate vulnerabilities into clear priorities for development teams.

• Experience in fintech or payment environments, with an understanding of payment security.

• Scripting skills in Python or Bash for automating security scanning and checks.

• Experience with container and Kubernetes security.