We are seeking a Cybersecurity Engineer to support ongoing application security initiatives across multiple development teams. The candidate will partner with engineering teams to help identify vulnerabilities, recommend remediation strategies, and guide teams through secure development lifecycle processes.
Responsibilities :
- Security Defect Management : Analyze and validate security vulnerabilities identified via CodeQL, Rapid7, penetration testing, bug bounty programs, etc. Explain vulnerabilities, risks, and remediation actions to engineering teams.
- Engineering Consulting : Act as a security advisor to software engineers, architects, and product owners. Provide context-aware guidance on secure architecture decisions and documentation. Support teams in implementing new features securely and remediating vulnerabilities.
- Tool Enablement : Set up and monitor security tooling at the repository / application level (CodeQL, Rapid7, etc.). Ensure proper automation and integration according to security processes.
- Security Testing & Onboarding : Coordinate security testing efforts (penetration tests, security assurance assessments). Manage resulting findings through the defect management process.
- Team Interaction : Work directly with application development teams as their dedicated security engineer. Collaborate with the larger security engineering team to align on standards and processes.
Required Qualifications :
Bachelor's in Computer Science or related field with 8+ years of Information Security experience OR Master's degree with 6+ years of experience.Application Security expertise - understanding of vulnerabilities and remediation (OWASP, CWE / CVE, SANS 25).Knowledge of security processes including : Enterprise security architecture, Threat modeling, Vulnerability assessment, Risk analysis, Identity & Access Management, Defense in depth, SDLC processes, API security, SCA / SAST / DAST.Cloud security experience (Azure or AWS).Professional certifications preferred (CISSP, CCSP, GWAPT, GWEB, AWS Security, etc.).Development background in Java, Python, .NET, JavaScript, or similar.Experience with automation and scripting.