Cybersecurity Engineer
Core
Strengthen product and enterprise security posture through proactive assessments, threat modeling, secure design reviews, and DevSecOps integration.
Role type
Senior hands-on IC cybersecurity engineer (product security & DevSecOps)
Builds
Secure web applications, APIs, cloud environments, and supporting infrastructure
Domain
Cybersecurity, Application Security, Cloud Security, DevSecOps
Required skills
Penetration testing, threat modeling, secure design reviews, secure development practices, security automation, vulnerability management, cloud security, DevSecOps integration, security standards development, technical mentorship
Preferred skills
STRIDE/PASTA frameworks, OWASP Top 10 knowledge, SAST/DAST/SCA tooling, container security, zero-trust concepts, regulatory compliance support
Technologies
Python, Java, JavaScript, C#, PowerShell, Go, AWS, Azure, Google Cloud Platform, Kubernetes, microservices, APIs, CI/CD pipelines
Responsibilities
Conduct comprehensive penetration testing of web applications, APIs, and cloud environments; Lead threat modeling exercises for new and existing products; Perform secure design and architecture reviews; Integrate security testing and validation into CI/CD pipelines; Develop and maintain security tooling, scripts, and automation capabilities; Provide technical guidance and mentorship to engineering teams on secure design and best practices.
Seniority
Senior, hands-on IC
