Cybersecurity Engineer - Applications
K
Kalles GroupApplication security
This role can be remote.Full-TimeSenior
Salary120,000 - 170,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of experience in cybersecurity with significant hands-on experience performing application security assessments
- Required Skills
- AWSGCPAzure
Requirements
- Have 8+ years of cybersecurity experience, including significant hands-on application security assessment experience.
- Understand secure software development practices, secure design principles, and vulnerability management.
- Have experience with threat modeling and secure architecture reviews.
- Have hands-on experience with application security testing technologies, including SAST, DAST, and SCA.
- Have experience assessing cloud-native applications running in AWS, Azure, or Google Cloud Platform.
- Know APIs, modern application architectures, and secure software development methodologies.
- Have experience developing security standards, assessment methodologies, or security review processes.
- Be able to prioritize security risks and communicate remediation strategies to technical and business stakeholders.
- Have a bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience.
- Preferred: certifications such as CISSP, OSCP, CSSLP, CCSP, or CISA.
- Preferred: experience applying AI or LLM technologies to application security workflows or building security automation.
- Preferred: experience with formal design or security architecture reviews, DevSecOps, CI/CD security integration, or developer security enablement.
Responsibilities
- Perform security assessments of internally developed and third-party applications.
- Partner with engineering, product, and architecture teams to identify security risks during design and development.
- Conduct secure design reviews and provide security approval recommendations.
- Develop and enhance security assessment methodologies, frameworks, and best practices.
- Use AI-enabled tools and automation for assessments, threat modeling, compliance validation, and software supply chain analysis.
- Document findings and provide practical, risk-based remediation recommendations.
- Validate remediation efforts and verify that identified issues have been addressed.
- Develop reusable secure design patterns and security guidance for engineering teams.
- Monitor emerging threats, vulnerabilities, and application security practices.
- Collaborate with stakeholders to embed security throughout the software development lifecycle.
View Full Description & ApplyYou'll be redirected to the employer's site
