Security Engineer

About the role

Avertra is looking for a Security Engineer to design, implement, and maintain the security controls that will bring the platform to SOC 2 Type II and PCI DSS 4.0 compliance. You will work closely with the DevOps team on Azure/AKS and own the detection, application‑security, and vulnerability‑management programs.

Key responsibilities

• Introduce and tune DAST tools, triage findings and drive remediation.
• Deploy and maintain a semantic SAST engine for TypeScript/React/Node, manage rules and merge‑block policies.
• Build SIEM detection layers, create correlation rules, alerts and incident playbooks.
• Define and tune runtime workload detection and file‑integrity monitoring in AKS.
• Own WAF rule set, customize OWASP rules, ensure logs flow to the SIEM.
• Establish a vulnerability aggregation platform, assign owners, set risk‑based SLAs and surface breaches.
• Manage ASV scans and annual penetration‑test vendors, produce evidence for SOC 2 and PCI DSS audits.

Required profile

• Proven experience integrating security scanners into CI/CD pipelines (Azure DevOps preferred).
• Hands‑on knowledge of Azure, AKS and cloud‑native environments.
• Experience supporting compliance frameworks such as SOC 2 and PCI DSS.

Required skills

• Azure, Azure Kubernetes Service (AKS)
• TypeScript, React, Node.js
• SAST, DAST, SCA, secrets scanning, IaC security
• OWASP ZAP (or equivalent) and semantic SAST tools (Semgrep, CodeQL)
• SIEM platforms – Microsoft Sentinel, Wazuh, Elastic
• WAF configuration and OWASP rule tuning
• Vulnerability management and aggregation tools

What we offer

• A global, purpose‑driven family focused on sustainable, scalable ecosystems.
• High‑impact, clearly scoped mandate with real control delivery.
• Strong investment in personal growth and mastery of the security domain.