Security Engineer
Summary
The Security Engineer will integrate security controls and vulnerability management into the software delivery lifecycle at Nortal. The role involves conducting threat modeling, secure code reviews, and automating security gates within cloud and containerized environments.
Overview
We are looking for a Security Engineer to help embed security practices into the software delivery lifecycle and enable teams to build and release secure products without unnecessary friction. In this role, you will work closely with engineering, product, platform, and security teams to integrate security controls, vulnerability management, and secure engineering practices into day-to-day delivery activities.
As a hands-on technical contributor, you will participate in team ceremonies, conduct security reviews, support incident response activities, and build reusable secure-by-default solutions. You will collaborate with Security Architects and other security specialists to address complex security challenges while helping teams adopt secure development practices and improve overall security maturity.
About Nortal:
We’re Nortal. We think big and create cutting-edge digital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwide impacted by our work, we believe we’ve got the numbers to back up that statement.
Our global teams have played a significant role in many Fortune 500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.
About TUI
TUI is a global business with over 70,000 people on board, a great history and challenging plans for building a digital future. TUI is the largest leisure, travel and tourism company globally, and it owns travel agencies, hotels, airlines, cruise ships and retail shops.
Responsibilities
- Conduct threat modelling, secure code reviews, and architecture reviews using established security standards and guidance.
- Identify attack vectors, data flow weaknesses, and authentication and authorisation gaps, and provide actionable remediation guidance.
- Perform vulnerability discovery, security testing, remediation planning, validation, and prioritisation of findings using established risk frameworks.
- Configure and maintain security scanning, pipeline gates, secret detection, Infrastructure-as-Code security scanning, and other security automation.
- Embed security into domain delivery processes through secure design patterns, reusable artefacts, templates, and security requirements.
- Participate in security incident investigation activities, including evidence gathering, root cause analysis, remediation validation, and post-incident reviews.
- Support compliance, audit readiness, threat monitoring, and security knowledge sharing across product and platform teams.
Qualifications
- Experience applying security engineering practices within software, cloud, or platform environments.
- Knowledge of secure software development principles, threat modelling, vulnerability management, and security testing approaches.
- Understanding of application, infrastructure, and cloud security risks, attack vectors, and mitigation techniques.
- Experience with authentication, authorisation, encryption, secrets management, and data protection principles.
- Familiarity with security tooling for code analysis, vulnerability identification, security testing, and monitoring activities.
- Working knowledge of cloud security controls, Infrastructure-as-Code, container technologies, modern deployment practices, and incident response processes.
- Strong analytical, problem-solving, communication, and collaboration skills, with experience implementing security controls in agile delivery environments and working with cloud technologies.
Nortal offers:
24 working days of paid vacation
11 paid national holidays
Health care: up to 10 paid sick days, on-demand medical insurance, vaccinations
Mental health support: webinars, resources, and compensation for therapy sessions
Access to our corporate learning platform
Language classes (English)
Flexible benefits budget: a fixed monthly amount you can spend on what matters most to you - medical insurance, sports, leisure, fuel, and more
8-hour workday aligned with the client’s working hours
Hybrid work options: work from home with the option to use our cozy office space whenever needed
Engaging team events and thoughtful gifts throughout the year
In your resume please allow our company to use your personal data