Cybersecurity Engineer

Build, implement, and maintain security capabilities across cloud infrastructure, enterprise applications, AI-enabled systems, and modern engineering platforms. Implement security controls, automate security processes, integrate security throughout the software development lifecycle, improve detection and monitoring, and support secure adoption of emerging technologies.

Responsibilities

• Partner with engineering teams to implement security controls and secure design patterns across cloud infrastructure, enterprise applications, developer platforms, and AI-enabled systems.
• Build and operationalize security controls for identity and access management, data protection, network security, logging, monitoring, and auditability.
• Participate in threat modeling, architecture reviews, and security assessments for applications, cloud platforms, and emerging technologies.
• Implement and maintain security controls for cloud platforms, APIs, developer tooling, and third-party technologies.
• Build monitoring, detection, alerting, and incident response capabilities with engineering and security operations teams.
• Integrate security tooling and automation into CI/CD pipelines and cloud-native engineering workflows using Infrastructure-as-Code and policy-as-code.
• Embed security throughout the Secure Software Development Lifecycle.
• Assess and mitigate technical and operational risks associated with cloud platforms, enterprise applications, AI-enabled systems, and third-party providers.
• Partner with compliance, audit, and business stakeholders to meet regulatory, control, and governance requirements.
• Contribute to security standards, engineering patterns, automation, and operational best practices.
• Stay current on emerging security threats, technologies, and industry best practices.

Requirements

• 5+ years of experience in cybersecurity, security engineering, cloud security, application security, DevSecOps, or a related engineering discipline.
• Experience implementing security controls within cloud-native environments, preferably AWS.
• Strong understanding of identity and access management, data protection, network security, vulnerability management, monitoring, and incident response.
• Experience integrating security into CI/CD pipelines and Secure Software Development Lifecycle practices.
• Strong programming and scripting capabilities, including Python, Terraform, and Infrastructure-as-Code.
• Experience with cloud infrastructure, Kubernetes, APIs, and modern application architectures.
• Experience with SIEM/SOAR, vulnerability management, cloud security, endpoint security, application security, or detection engineering platforms.
• Experience conducting threat modeling, security assessments, and architecture reviews.
• Familiarity with AI/ML systems, LLMs, and AI-enabled application architectures is a plus.
• Experience operating in regulated environments with strong control, audit, and compliance requirements, preferably financial services.
• Strong communication and collaboration skills across engineering, infrastructure, product, and security teams.