System Security Engineer

About the job:Arnifi is looking for an experienced engineer to strengthen the security and data protection of its core business platform. You will work on a live system, making incremental, well-tested, and reversible improvements without disrupting day-to-day operations.

Key Responsibilities:

1. Strengthen application security by reviewing the platform for vulnerabilities and addressing authentication, authorization, session handling, and input validation in line with OWASP best practices.

2. Protect sensitive data by applying encryption, access controls, and secure storage and handling practices for personal and confidential data across applications and integrations.

3. Improve logging and auditability by ensuring logs and audit trails capture the required information without exposing sensitive data.

4. Improve code quality by adding automated tests and CI pipelines, refactoring code to make it safer and easier to maintain, and reviewing pull requests.

5. Collaborate with the Product Manager and team on priorities, maintain clear documentation and runbooks, provide regular progress updates, and ensure a clean handover at the end.

6. Build full-stack web systems by designing, developing, and shipping features and APIs across the front end using Next.js/React and back end using Node.js/TypeScript, while working with the existing codebase and third-party integrations.Who can apply:Only those candidates can apply who:have minimum 1 years of experienceare Computer Science Engineering studentsSalary:₹ 7,00,000 - 8,00,000 /yearExperience:1 year(s)Deadline:[hidden]:59:59Skills required:Node.js, PostgreSQL, React and TypeScriptOther Requirements:1. 1–2 years of professional experience in full-stack or backend engineering, with at least 1 year of experience in application security.2. Strong knowledge of Node.js and TypeScript; production experience with Strapi is a plus.3. Solid knowledge of Next.js and React.4. Proficiency in PostgreSQL, including encryption and migrations; experience with row-level security is preferred.5. Working knowledge of the OWASP Top 10.6. Previous experience in audit or penetration-test remediation.7. Experience with UAE PDPL, GDPR, or similar data-protection regulations.8. Experience with AWS.About Company:Welcome to Arnifi, your passport to a seamless business journey in the Middle East! We specialize in making your dreams take flight, offering expert guidance in every step of your business, from setup to scale-up. With us, it's all about ease, efficiency, and transparency. From digital company formation to visa procurement, accounting & banking solutions - we handle it all effortlessly, so you can focus on what you do best: growing your business. We are making it easier than ever to navigate the complexity of the Middle East market ensuring every move is made with precision.

At Arnifi, we offer flexible services tailored to every stage of your business. Whether you're a newcomer or a seasoned pro, we're here to simplify your path. Ready to soar? Trust Arnifi to be your launchpad to success.

Responsibilities

Arnifi is looking for an experienced engineer to strengthen the security and data protection of its core business platform. You will work on a live system, making incremental, well-tested, and reversible improvements without disrupting day-to-day operations.

Key Responsibilities:

1. Strengthen application security by reviewing the platform for vulnerabilities and addressing authentication, authorization, session handling, and input validation in line with OWASP best practices.

2. Protect sensitive data by applying encryption, access controls, and secure storage and handling practices for personal and confidential data across applications and integrations.

3. Improve logging and auditability by ensuring logs and audit trails capture the required information without exposing sensitive data.

4. Improve code quality by adding automated tests and CI pipelines, refactoring code to make it safer and easier to maintain, and reviewing pull requests.

5. Collaborate with the Product Manager and team on priorities, maintain clear documentation and runbooks, provide regular progress updates, and ensure a clean handover at the end.

6. Build full-stack web systems by designing, developing, and shipping features and APIs across the front end using Next.js/React and back end using Node.js/TypeScript, while working with the existing codebase and third-party integrations.