Cybersecurity Engineer

Overview

• Design, deploy, and maintain security controls and tooling across cloud (AWS, Azure, GCP) and on-premise environments, including network security, host hardening, endpoint protection, and application security controls.
• Implement and manage identity and access management solutions, least-privilege models, and secure authentication/authorization mechanisms.
• Integrate security into CI/CD pipelines and automate security testing (SAST, DAST, dependency scanning) and infrastructure-as-code (IaC) security checks.
• Develop and tune detection rules, alerts, and playbooks for Security Operations using SIEM, EDR, and cloud-native monitoring tools.
• Participate in incident response activities, perform root cause analysis, and implement remediation and prevention measures.
• Collaborate with SOC, IT, and engineering teams to ensure timely containment, eradication, and recovery from security incidents.
• Advise product and engineering teams on secure design principles, threat modeling, and security requirements for new features and integrations.
• Review architecture and code for security risks, provide actionable recommendations, and help implement secure design patterns.
• Participate in design and architecture reviews to ensure security and compliance requirements are addressed early in the development lifecycle.
• Manage vulnerability scanning, prioritize remediation activities, and coordinate patching and configuration changes with engineering and IT teams.
• Drive continuous improvement through automation of security controls, monitoring, reporting, and incident lessons learned.
• Evaluate and recommend security tools and services to strengthen detection, prevention, and response capabilities.
• Develop and maintain security runbooks, architecture diagrams, control documentation, and operational playbooks.
• Provide security awareness, developer-focused training, and practical guidance to engineering and operations teams.
• Work cross-functionally to ensure security requirements are integrated into project plans, vendor selections, and deployment workflows.