Senior Product Security Engineer
📍 Colombo, Sri Lanka (Hybrid)Hybrid📂 Engineering📅 Posted Jul 2, 2026
We’re looking for a Senior Security Engineer to strengthen security across our platform, infrastructure, and development environments.
This is a hands-on engineering role focused on building and improving security capabilities across cloud infrastructure, DevOps environments, and detection systems. The role suits engineers who enjoy working across multiple areas of security and partnering closely with product and platform teams.
We value security generalists who can operate across several domains rather than narrow specialists.
Responsibilities
- Build and improve detection capabilities (SIEM, EDR, logging, alerting)
- Conduct proactive threat hunting and investigate security incidents
- Improve security across cloud infrastructure and DevOps environments
- Work with engineering teams to strengthen DevSecOps and CI/CD pipeline security
- Improve software supply chain security (dependency scanning, container security)
- Design and implement practical security controls across systems and infrastructure
- Partner with engineering teams to embed security practices into development and operational workflows
- Contribute to the evolution of security capabilities as the organisation grows
Qualifications & Skills
- Several years of hands-on experience in security engineering
- Experience working across infrastructure, cloud, DevOps, or platform environments
- Experience in at least some of the following areas:
- detection engineering (SIEM, EDR, building detections, alert tuning)
- threat hunting and incident investigation
- Cloud security (AWS or similar environments)
- DevSecOps and CI/CD pipeline security
- software supply chain security
- Ability to operate across multiple areas of security rather than focusing on a single niche
- Experience collaborating with engineering teams in product or platform environments
- Strong communication and cross-functional collaboration skills
Nice to have
- Experience working in crypto, Web3, or fintech environments
- Understanding of security threats specific to crypto or digital asset platforms
- Experience leading technical initiatives, projects, or small teams
- Experience working in startup or high-growth environments
- Background evolving from systems administration, infrastructure, or DevOps into security
Apply at KAST