Job Description: Security Analyst / Security Engineer

We are seeking a skilled Security Analyst / Security Engineer to strengthen our organization''s cybersecurity posture. The ideal candidate will have experience in application security, vulnerability management, incident response, and collaborating with cross-functional security and engineering teams. This role is responsible for identifying, assessing, and mitigating security risks while ensuring compliance with organizational security standards and industry best practices.

Key Responsibilities

• Perform application security assessments, including secure code reviews and vulnerability identification.

• Conduct vulnerability assessments and coordinate remediation efforts with development and infrastructure teams.

• Monitor, investigate, and respond to security incidents, ensuring timely containment and resolution.

• Analyze security alerts from SIEM, EDR, IDS/IPS, and other security monitoring tools.

• Collaborate with development, DevOps, infrastructure, and security teams to integrate security throughout the software development lifecycle (SDLC).

• Support penetration testing activities and validate remediation of identified vulnerabilities.

• Assist in threat modeling, risk assessments, and security architecture reviews.

• Develop and maintain security policies, standards, and technical documentation.

• Participate in incident response planning, forensic investigations, and post-incident reviews.

• Recommend and implement security controls to reduce organizational risk.

• Stay informed about emerging threats, vulnerabilities, and industry best practices.

Required Skills & Qualifications

• Bachelor''s degree in Computer Science, Information Security, Cybersecurity, or a related field.

• 7 years of experience in information security, application security, or security engineering.

• Strong understanding of application security principles and the Secure SDLC.

• Experience with vulnerability management tools such as Tenable, Qualys, Rapid7, or similar.

• Hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar) and endpoint security solutions.

• Knowledge of web application security concepts, including the OWASP Top 10.

• Familiarity with common security testing tools such as Burp Suite, Nessus, Nmap, OWASP ZAP, or similar.

• Understanding of authentication, authorization, encryption, and identity management concepts.

•  
• Salesforce exp. is required