Security Engineer - Cyber

Security Engineer - Cyber

We are seeking a highly skilled Cyber Security Engineer to join our team. In this role, you will bridge the gap between software engineering and information security, applying robust engineering principles to design, automate, and optimize our security solutions. As a subject matter expert, you will champion a DevSecOps culture, collaborating closely with development and operations teams to embed security seamlessly into our application lifecycles, cloud infrastructure, and CI/CD pipelines.

Responsibilities

• Security Engineering & Optimization: Apply software engineering principles to design, implement, configure, and optimize enterprise security solutions, automation workflows, and Commercial Off-The-Shelf (COTS) products.
• DevSecOps Collaboration: Serve as a subject matter expert, partnering with development and operations teams to integrate automated security services directly into application development and deployment processes.
• Automation Engineering: Proactively identify and execute automation opportunities to streamline security processes, eliminate manual overhead, and enhance team efficiency.
• Code Review & Vulnerability Management: Conduct hands-on technical reviews of application code to ensure security compliance and identify potential vulnerabilities before production delivery.
• Incident Support & Data Analysis: Support ongoing security investigations through advanced data analysis, information gathering, and threat forensics.
• Compliance & Governance: Establish, monitor, and maintain security controls and compliance measures, ensuring strict alignment with industry regulations and organizational policies.
• Documentation & Knowledge Sharing: Author and maintain high-quality documentation, architectural guidelines, and training materials to promote security best practices across the organization.
• Strategic Enablement: Actively identify and eliminate architectural or process barriers to continuously improve the program's overall security posture while balancing risk management with operational efficiency and business velocity.

Requirements

<>Required Skills

• Education: Bachelor's degree in Computer Science, Cyber Security, a related technical field, or commensurate specialized training, professional certifications, or equivalent practical work experience.
• Experience: 7+ years of overall professional IT experience, with a minimum of 5 years dedicated to cloud solutions engineering, software development, and application security.
• Technical Skillset:
• Programming Proficiency: 7+ years of experience writing clean, production-grade code in an object-oriented language (Python, Java, or Go preferred).
• DevSecOps Expertise: Strong, proven experience working within a modern DevSecOps software development environment.
• Cloud Architecture: Expert-level understanding of cloud computing concepts, architectures, and services, with an explicit focus on Amazon Web Services (AWS).
• Infrastructure as Code (IaC): Direct, hands-on experience provisioning and deploying secure cloud solutions to AWS utilizing Terraform.
• Containers & Orchestration: In-depth knowledge of containerization (Docker) and orchestration technologies (Kubernetes), including container security best practices, isolation, and compliance.
• Application Security Tools: Extensive experience reviewing application code for security flaws, with direct, hands-on experience implementing and managing SAST (Static Application Security Testing) and Software Composition Analysis (SCA) tools for open-source dependency scanning.
• Risk & Compliance: Solid grasp of cybersecurity frameworks, compliance requirements, and risk management principles.

<>Preferred Skills

• Experience with SAST: Direct, hands-on experience implementing and managing SAST (Static Application Security Testing) tools.
• Cloud Security: Experience with securing cloud environments and understanding of cloud security best practices.

Thanks & Regards,

Pradeep Kumar

International Solutions Group, Inc.

E-mail:

Direct: