Security Engineer

The security engineer joins CARTA HOLDINGS’ ICT security team, supporting roughly 20 subsidiaries with differing products, development structures and technology stacks. The role works with product teams and corporate functions to assess risks and carry security measures from design and implementation into practice and continuous improvement. The initial focus is product security: handling developers’ security questions, web-application vulnerabilities, development reviews and DevSecOps. The work includes integrating static code scanning into CI/CD and supporting detection and remediation with Dependabot and Baseline, plus product incident response. The scope may extend to cloud and corporate security, including AWS and Google Cloud, Microsoft Defender monitoring, SOC and alert response, identity management and group-wide risk management. Applicants need at least three years of web application development experience, foundational knowledge of application development, networking, operating systems and cloud services, and sustained learning or activity in security. Prior professional security experience is not required.