Senior Security & Compliance Engineer

About the role

Upstream is looking for a Senior Security & Compliance Engineer to strengthen the security posture of its global mobile marketing platform. The role combines hands‑on technical work with leadership, ensuring that services remain highly available, resilient, and compliant.

Key responsibilities

• Monitor security events, manage escalations and act as liaison during incidents.
• Serve as the dedicated security analyst for critical projects.
• Lead the vulnerability management lifecycle, overseeing patching and remediation.
• Perform security audits, penetration testing, evidence collection and forensic analysis.
• Drive technical tasks to completion within defined timelines and constraints.
• Educate end‑users on security best practices and maintain up‑to‑date compliance policies.
• Provide technical security expertise for client discussions, RFPs, bids and commercial engagements.

Required profile

• Passionate engineer with a strong interest in solving complex security challenges.
• Proven ability to act as a technical lead and reference point within production‑facing environments.
• Experience communicating security concepts to both technical and non‑technical audiences.

Required skills

• Deep knowledge of TCP/IP and the Linux network stack.
• Network traffic and protocol analysis.
• Vulnerability assessment and scanning methodologies.
• Network service enumeration.
• Web application penetration testing.
• System and infrastructure hardening.
• Security audits and forensic analysis.
• Penetration testing certifications or experience (e.g., CHECK, CREST, CEH, TIGER).

What we offer

• Opportunity to work on high‑impact security projects for a global leader in mobile marketing.
• Collaborative environment with cross‑functional engineering and network teams.
• Continuous learning and professional development in cutting‑edge security technologies.