Security Engineer

About Nortal:

• Conduct threat modelling, secure code reviews, and architecture reviews using established security standards and guidance.
• Identify attack vectors, data flow weaknesses, and authentication and authorisation gaps, and provide actionable remediation guidance.
• Perform vulnerability discovery, security testing, remediation planning, validation, and prioritisation of findings using established risk frameworks.
• Configure and maintain security scanning, pipeline gates, secret detection, Infrastructure-as-Code security scanning, and other security automation.
• Embed security into domain delivery processes through secure design patterns, reusable artefacts, templates, and security requirements.
• Participate in security incident investigation activities, including evidence gathering, root cause analysis, remediation validation, and post-incident reviews.
• Support compliance, audit readiness, threat monitoring, and security knowledge sharing across product and platform teams.

• Experience applying security engineering practices within software, cloud, or platform environments.
• Knowledge of secure software development principles, threat modelling, vulnerability management, and security testing approaches.
• Understanding of application, infrastructure, and cloud security risks, attack vectors, and mitigation techniques.
• Experience with authentication, authorisation, encryption, secrets management, and data protection principles.
• Familiarity with security tooling for code analysis, vulnerability identification, security testing, and monitoring activities.
• Working knowledge of cloud security controls, Infrastructure-as-Code, container technologies, modern deployment practices, and incident response processes.
• Strong analytical, problem-solving, communication, and collaboration skills, with experience implementing security controls in agile delivery environments and working with cloud technologies.

Nortal offers:

• 24 working days of paid vacation

• 11 paid national holidays

• Health care: up to 10 paid sick days, on-demand medical insurance, vaccinations

• Mental health support: webinars, resources, and compensation for therapy sessions

• Access to our corporate learning platform

• Language classes (English)

• Flexible benefits budget: a fixed monthly amount you can spend on what matters most to you - medical insurance, sports, leisure, fuel, and more

• 8-hour workday aligned with the client’s working hours

• Hybrid work options: work from home with the option to use our cozy office space whenever needed

• Engaging team events and thoughtful gifts throughout the year

In your resume please allow our company to use your personal data