Full Stack Django Security Engineer

**Job Title:** Full Stack Security Engineer **About the Role:** We are seeking a highly skilled Full Stack Security Engineer to take the lead in hardening our infrastructure and securing our financial education software platform. As we prepare to scale our B2B application for enterprise use across schools and universities, robust security is our top priority. In this role, you will be responsible for configuring and securing our server environments, auditing our cloud deployments, and driving our penetration testing lifecycle. You will work closely with our development team to ensure our Linux and containerized Django architecture (built utilizing Python, PostgreSQL, Docker, HTML, and CSS) meets strict enterprise security standards from the ground up. **Key Responsibilities:** * **Linux Server & Application Deployment:** Configure, manage, and harden our Linux servers hosting the core application stack. Implement rigorous access controls, system-level security protocols, and secure server environments to prevent unauthorized access. * **Infrastructure Security:** Secure and harden our Synology NAS (DS920+) environment, ensuring safe, isolated access for users testing and interacting with our application. * **Cloud Architecture Review:** Audit and configure our cloud deployment settings across AWS and Google Cloud Platform (GCP) to guarantee enterprise-grade security, proper identity and access management (IAM), and network defense. * **Vulnerability Management:** Coordinate, schedule, and oversee both automated and manual penetration testing of our web applications. * **Remediation & Collaboration:** Translate pen-test findings into actionable tasks and work directly with our engineering team to implement fixes, patch vulnerabilities, and improve code security. * **Enterprise Django Security:** Apply your deep understanding of security configurations to secure our specific tech stack (Django, Python, PostgreSQL, Docker, HTML, CSS), ensuring protection against OWASP Top 10 vulnerabilities and data breaches. **Required Qualifications:** * Proven experience as a Security Engineer, DevSecOps Engineer, or similar role focusing on full-stack web applications. * Strong proficiency in Linux system administration, including server hardening, SSH key management, firewall configurations, and secure application deployment. * Deep, practical knowledge of securing enterprise-level web applications built on our core stack (Django, Python, PostgreSQL, Docker, HTML, and CSS), and optimizing frameworks for secure deployments. * Hands-on experience configuring and auditing security settings in both AWS and Google Cloud environments. * Familiarity with securing on-premise hardware and network-attached storage, specifically Synology DSM systems. * Experience leading or managing penetration testing processes and collaborating with development teams to resolve security flaws. * Strong communication skills with the ability to explain complex security risks to technical and non-technical stakeholders. **Nice-to-Haves:** * Familiarity with compliance standards relevant to educational technology and financial data. * Experience with automated security scanning tools integrated into CI/CD pipelines.