Security Engineer (Fractional)

About the role

Arcanys is a Swiss software development partner with a large team in the Philippines. This role owns designing and advancing our security posture to enterprise-grade levels as a fractional Security Engineer.

What you'll do

• Design a 12 month security roadmap and establish a Risk Register with remediation priorities.
• Mentor the IT Manager and train lead developers on secure coding and DevSecOps practices.
• Standardize client security questionnaires and ensure cross-border data handling compliance.
• Draft and implement core security policies including incident response, access control, and DR/BCP.
• Evaluate and oversee essential security tools such as EDR, SIEM, and vulnerability scanners.

What they're looking for

• Hands-on security engineering experience in cloud, application security or DevSecOps.
• Strong knowledge of SDLC, CI/CD security, AWS/GCP, IAM, vulnerability management and endpoint security.
• Experience reviewing AWS/GCP configurations, GitHub repos, CI/CD pipelines and security tooling.
• Experience with client security assessments, audits or vendor assessments; familiarity with GDPR, ISO 27001 or SOC 2 is a plus.
• Security certifications such as AWS/GCP, CISSP, CISM, CISA or equivalent preferred.

For applicants in Nigeria

• The listing states global remote support but does not specify a Nigeria-specific timezone requirement. Confirm interview timing if needed.
• Location is listed as remote with multiple regions; no explicit Nigeria-only work authorization noted.
• The listing does not specify whether the role is contractor or employee.
• Pay currency or salary range is not stated in the listing.