Description

Platform & Application Security responsibilities include identifying, assessing, and mitigating security risks across Derq’s platform and services, supporting secure design reviews for new features, conducting threat modeling and risk assessments, and partnering with engineering teams on secure coding practices and remediation.

Cloud & Infrastructure Security duties involve securing cloud environments (AWS, GCP, Azure), reviewing IAM, access controls, secrets management, and network security, supporting vulnerability scanning and remediation, and monitoring and responding to security incidents.

Security Operations tasks include defining and improving security policies, standards, and controls, supporting incident response and post‑incident reviews, working with external vendors, auditors, and customers on security‑related questions, and helping prepare for assessments such as SOC 2 and ISO 27001.

Awareness & Enablement responsibilities consist of partnering with Engineering and Product to embed security early in the development lifecycle, raising security awareness across teams without slowing delivery, and contributing to internal documentation and security best practices.

• Identify, assess, and mitigate security risks across platform and services.
• Conduct threat modeling, risk assessments, and secure design reviews.
• Partner with engineering to enforce secure coding practices and remediation.
• Secure cloud environments (AWS, GCP, Azure) and manage IAM, secrets, and network security.
• Perform vulnerability scanning, remediation, and incident monitoring/response.
• Define and improve security policies, standards, and controls; support incident response.
• Prepare for and assist with SOC 2, ISO 27001, and customer security assessments.
• Embed security early in development lifecycles and raise team-wide security awareness.
• Contribute to internal security documentation and best‑practice guides.

Requirements

The ideal candidate has 6‑8+ years of experience in security engineering, application security, or cloud security, a strong understanding of web application security (OWASP Top 10), and experience securing cloud‑based platforms including IAM, networking, and encryption. Familiarity with CI/CD security, vulnerability scanning, monitoring tools, and frameworks such as SOC 2 or ISO 27001 is required; scripting or automation skills (Python, Bash) and the ability to explain security risks to non‑security stakeholders are essential. Experience in IoT, ITS, smart mobility, or data‑heavy platforms, as well as a background working closely with product and engineering teams, is a plus.

• 6‑8+ years experience in security engineering, application or cloud security.
• Strong knowledge of OWASP Top 10 and cloud IAM, networking, encryption.
• Familiarity with CI/CD security tools, vulnerability scanners, and monitoring solutions.
• Experience with SOC 2, ISO 27001 frameworks; scripting/automation (Python, Bash).
• Ability to communicate security risks to non‑technical stakeholders.
• Bonus: experience in IoT, ITS, smart mobility, or data‑intensive platforms.

Benefits

The company offers an opportunity to work at the forefront of smart infrastructure innovation, collaborating with industry experts and directly influencing road safety and autonomous technology.

Training + Development

Interview process

Visa Sponsorship

Security clearance