Cybersecurity Engineer 4

About the role

We are seeking an experienced Lead Cybersecurity Engineer to support a large enterprises application security and cloud security initiatives.

Responsibilities

• Partner with software development teams to identify and remediate application security vulnerabilities
• Lead Security by Design initiatives and promote secure SDLC practices
• Perform threat modeling, risk assessments, and vulnerability analysis
• Analyze security findings from CodeQL, Rapid7, penetration testing, and other assessment tools
• Provide security consulting and architectural guidance to engineering teams and leadership
• Support AWS and Azure cloud security initiatives
• Drive vulnerability remediation and security risk reduction efforts
• Manage and enable SAST, DAST, and SCA security testing programs
• Cook up penetration testing engagements and security assessments
• Secure APIs, web services, cloud-native applications, and Infrastructure as Code (IaC)
• Support DevSecOps initiatives and security integration within CI/CD pipelines
• Collaborate across multiple teams to improve security processes, compliance, and enterprise standards

Requirements

• Strong application security expertise (OWASP, CWE/CVE, SANS Top 25)
• Experience with threat modeling, vulnerability assessments, and risk analysis
• Knowledge of enterprise security architecture, Defense-in-Depth, and secure SDLC practices
• Experience with Identity & Access Management (IAM) and API security
• Hands-on experience with SCA, SAST, and DAST security testing tools
• Cloud security experience with AWS and/or Microsoft Azure
• Development experience with Java, Python, .NET, JavaScript, or similar languages
• Automation and scripting experience
• Strong communication skills and ability to partner with technical and non-technical teams

Qualifications

• Bachelor's degree with 8+ years of Cybersecurity/Information Security experience OR Master's degree with 6+ years

Skills

• Professional security certifications such as CISSP, CCSP, CSSLP, GWAPT, GWEB, or AWS Security certifications
• Experience securing web services, APIs, and cloud-native applications
• Infrastructure as Code (IaC) and DevSecOps experience
• Experience with CodeQL, Rapid7, and vulnerability management tools
• Penetration testing support, remediation management, and security assessment programs
• AI fluency and understanding of AI-related security risks and controls
• Enterprise application and cloud security engineering background

Benefits

Hybrid work arrangement beginning Day 1 (Wednesday onsite) Expected transition to full-time onsite attendance in the future Candidate will be assigned a dedicated portfolio of applications and partner directly with development teams Part of a larger Cybersecurity Engineering organization establishing security standards and best practices Highly collaborative environment working with software engineers, architects, product owners, and engineering leaders Focused on application security, cloud security, vulnerability management, and DevSecOps initiatives

Pay

$88-90/hr

Schedule

Hybrid work arrangement beginning Day 1 (Wednesday onsite) Expected transition to full-time onsite attendance in the future