Information Security Lead

About the role

Yanolja Cloud Solution (YCS) seeks an experienced Information Security Lead to protect its SaaS products, APIs, cloud infrastructure, internal systems, and customer data. This senior technical leadership position combines hands‑on security engineering with strategic governance across a global hospitality‑technology platform.

Key responsibilities

• Define and enforce security standards for applications, APIs, and cloud services.
• Lead incident response investigations and drive remediation of security findings.
• Conduct vulnerability assessments, penetration‑test reviews, and risk mitigation.
• Collaborate with engineering and DevOps teams to embed security into CI/CD pipelines (DevSecOps).
• Design security architecture for multi‑tenant SaaS environments.
• Maintain and tune security tooling such as SIEM, EDR, WAF, and vulnerability‑management platforms.

Required profile

• Minimum 10 years of professional experience in cybersecurity or information security.
• Proven hands‑on expertise in application, API, and cloud security.
• Experience investigating real‑world security incidents and leading remediation.
• Strong ability to work closely with engineering, DevOps, and product teams.

Required skills

• AWS security, IAM, and least‑privilege design.
• Web application security, OWASP Top 10, OWASP API Security Top 10.
• REST API security, OAuth 2.0, JWT, API‑key management.
• Authentication, authorization, RBAC, multi‑tenant security.
• Linux and Windows security fundamentals.
• TCP/IP, firewalls, WAF, TLS/SSL, encryption, secrets management.
• Database security and logging.
• SIEM, EDR, vulnerability‑management tools, penetration‑testing.
• DevSecOps practices and incident‑response processes.