Senior Software Cybersecurity Engineer

• The Senior Software Cybersecurity Engineer will analyze software designs and implementations to identify and remediate security vulnerabilities across the SDLC
• Security Design and Implementation:
• Perform threat modeling, risk assessments, audits, and architecture reviews, focusing on Cloud and container environments
• Manage Key Management and IAM controls
• Support engineering teams by defining security requirements to meet compliance standards and industry best practices
• Perform security code reviews and act as a technical SME for engineering and compliance teams
• Security Testing & DevSecOps:
• Deploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines
• Apply manual network/application testing, custom scripting, and unit test cases to validate controls
• Recommend improvements to existing security tools, processes, and secure coding standards
• Vulnerability Management:
• Drive vulnerability management with a focus on Kubernetes (K8s) and container images
• Triage, validate (including writing PoCs), and prioritize scanning tool findings
• Communicate security issues to stakeholders and manage remediation throughout the SDLC
• Incident Response and Compliance:
• Support product security incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks
• Apply Detection Engineering principles, setting baseline app security parameters and maintaining IDS/IPS rules
• Conduct post-incident analysis and lessons learned to refine response strategies
• Monitor emerging threats to proactively integrate new protections and ensure compliance with standards (OWASP, NIST)

Benefits

• Flexible work models
• Paid time off
• Paid parental and family leave
• Health care benefits
• Global wellness resources
• Employee assistance programs
• Rotation programs
• Mentor relationships
• Learning and development opportunities
• Retirement benefits
• Employee bonuses
• Stock grants & employee stock purchase plans

• Software Engineering: Hands-on development experience, specifically in Go and C#
• Leadership: Proven track record in leading process change, mentoring on secure-by-design principles, and driving continuous improvement
• Experience & Education: 7+ years in Security/Application Engineering; Bachelor’s degree in Computer Science, Information Security, or a related field
• AppSec & DevSecOps: Deep understanding of threat modeling (STRIDE, PASTA), IAM, cryptography, web/network protocols (HTTP, REST, TLS, TCP/IP), and integrating security tooling (SCA, SAST, DAST) into CI/CD pipelines
• Cloud & Container Security: Strong knowledge of orchestration (AWS, Azure, GCP, Docker, Kubernetes) and container image vulnerability lifecycles
• Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides)
• Advanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems
• Education & Certifications: Master’s degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security Specialty, OSCP, CISSP, SANS/GIAC)
• Soft Skills: Strong communication across technical and non-technical groups, calm under pressure, and experience in high-growth SaaS environments