PetroApp

DevOps Engineer

• Own the overall security roadmap and strategy for PetroApp, aligning it with business and product priorities.
• Act as the primary security point of contact for engineering and leadership.
• Define, document, and maintain security policies, standards, and guidelines for engineering teams.
• Lead risk assessments, threat modeling, and security design reviews for major initiatives.
• Define and track key security KPIs and report status, risks, and progress to leadership.
• Embed security into the SDLC by integrating SAST, DAST, dependency and container scanning, and IaC scanning into CI/CD pipelines.
• Establish secure coding practices and patterns; provide guidance and reviews for high-risk changes.
• Set up and maintain secrets management and secrets detection across repos and environments.
• Drive vulnerability management: triage findings, prioritize remediation, track SLAs, and verify fixes.
• Partner with engineers to ensure security controls are automated and developer-friendly.
• Own and continuously improve the cloud and platform security posture (IAM, networking, encryption, key management, hardening).
• Design and enforce least privilege access models and secure-by-default infrastructure baselines.
• Ensure security is built into core platform components such as Kubernetes, service-to-service communication, and data stores.
• Collaborate with SRE/DevOps on secure, resilient architectures, covering scalability, failover, and disaster recovery.
• Collaborate with SRE/DevOps to maintain high availability and reliability of production systems.
• Contribute to observability and monitoring with a security lens: actionable alerts, meaningful logging, and traceability.
• Participate in incident response for security-related events, including root cause analysis and long-term fixes.
• Help improve on-call and incident processes where security and reliability intersect.
• Own relationships with external security vendors, including penetration testing and security assessments.
• Scope, coordinate, and manage penetration tests; track findings through to remediation and retesting.
• Coordinate security-related input for audits, certifications, and customer security questionnaires as needed.
• Run security awareness and training initiatives tailored to engineers and operational teams.

Security Lead – DevOps/SRE

Backend Engineer

• Lead the design and development of scalable backend services using PHP and Laravel
• Own complex backend features from design through production
• Architect and optimize transaction-heavy systems for performance and reliability
• Drive best practices in code quality, testing, and system design
• Lead and participate in code reviews
• Mentor junior and mid-level engineers
• Collaborate with product, engineering, and leadership teams on technical decisions
• Improve backend architecture, security, and observability
• Ensure backend systems support high availability and growth
• Maintain high-quality technical documentation

Senior Software Backend Engineer

Auditor

• Execute detailed audit programs for assigned areas (Finance, Operations, HR) in accordance with the annual audit plan and International Standards for the Professional Practice of Internal Auditing (IPPF).
• Assist in the identification and assessment of key business risks and control deficiencies within audited processes.
• Evaluate the design and operating effectiveness of internal controls and recommend practical solutions to close gaps and strengthen the control environment.
• Prepare clear, concise, and evidence-based audit working papers that fully document testing procedures, findings, and conclusions.
• Draft preliminary audit reports highlighting observations, risks, and recommendations for management review.
• Support the Internal Audit Head in special investigations, fraud inquiries, or ad-hoc consultancy projects as required.
• Stay updated on emerging risks, industry trends, and best practices in internal auditing to continuously improve audit methodology.

Group Internal Auditor

Technical Recruiter

• Develop and execute comprehensive recruitment strategies to attract top-tier technical talent, including Backend, Frontend, DevOps, and other specialized engineering roles.
• Proactively source, identify, and engage high-quality candidates through advanced sourcing channels, professional networks, and talent communities.
• Conduct thorough initial screening interviews to assess candidates’ technical expertise and alignment with required technology stacks prior to submission to hiring managers.
• Partner closely with Engineering Managers, Product Leaders, and the CTO to define technical requirements, create accurate and compelling job descriptions, and align on hiring priorities and timelines.
• Manage the full recruitment lifecycle from requisition approval through offer acceptance, ensuring a seamless, professional, and positive candidate experience.
• Provide market intelligence and data-driven insights on salary benchmarks, talent availability, and competitor hiring trends to support leadership decision-making.
• Lead and manage complex offer negotiations to successfully close highly competitive technical candidates.

Security Lead – DevOps/SRE

Senior Software Backend Engineer

Group Internal Auditor

Senior Tech Talent Acquisition Specialist