Senior Cloud Security Engineer – Application & Platform Security - Boston
Motion Recruitment · Boston, MA · 1 mo ago
HybridFull-time
Daily Responsibilities
- Conduct security reviews for cloud-based applications and services
- Partner with development teams to identify and remediate security vulnerabilities
- Implement application security tooling within development and deployment pipelines
- Perform threat modeling exercises for new cloud initiatives and business applications
- Develop security standards and reusable patterns for cloud-native development
- Assess application architectures for potential security weaknesses and design flaws
- Automate application security testing and vulnerability validation processes
- Improve API security controls and authentication mechanisms
- Support remediation efforts for findings identified through penetration testing and security assessments
- Educate engineering teams on secure coding best practices and emerging application security threats
Requirements
- Experience securing cloud-native applications in AWS and/or Azure
- Strong understanding of application security principles
- Experience with Secure SDLC methodologies
- Knowledge of API security, authentication, and authorization frameworks
- Experience with SAST, DAST, SCA, and application security testing tools
- Understanding of OWASP Top 10 and common web application vulnerabilities
- Experience securing CI/CD pipelines and deployment workflows
- Proficiency in Python, Java, C#, or similar programming languages
- Familiarity with microservices and distributed application architectures
- Knowledge of container technologies and Kubernetes
Qualifications
- 5+ years of cybersecurity, application security, or cloud security experience
- Experience working with enterprise software development teams
- Financial services or asset management experience
- Experience implementing security champions programs
- Familiarity with API gateways and cloud application firewalls
- Experience with secrets management platforms
- Security certifications such as CSSLP, CISSP, CCSP, or GIAC certifications
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field