Role Overview

We are looking for a Security Engineer with less than six years of cybersecurity experience who has a solid grasp of the CIA Triad and hands-on experience with Threat Modeling and Risk Assessments. You should have a deep understanding of the OWASP Top 10 and the MITRE ATTACK framework.

Responsibilities

Secure Architecture & Threat Modeling
- Conduct Threat Modeling and Risk Assessments using the STRIDE methodology during the design phase of the SDLC.
- Develop and maintain Security Architectural Diagrams that define network segmentation, trust boundaries, and data flow across cloud environments.
- Apply the CIA Triad (Confidentiality, Integrity, and Availability) to every architectural decision, balancing security with system performance.
Vulnerability Management & Remediation
- Execute and oversee SAST and DAST programs (utilizing tools like Veracode) to identify code-level and runtime flaws.
- Perform deep-dive analysis of CVEs and third-party library risks; spearhead the creation of the SBOM (Software Bill of Materials).
- Partner with development teams to document security issues and provide a clear, actionable & Plan to Fix & for identified flaws.
Identity & Access Management (CIAM)
- Design and implement secure authentication and authorization flows using SAML 2.0 and OpenID Connect (OIDC).
- Provide subject matter expertise on CIAM best practices to ensure seamless yet secure user experiences and APIs security.
DevSecOps & Automation
- Automate security scanning and policy enforcement within the DevOps CI/CD pipeline.
Coordinate with Development and QA team
- Understands the concept of CVE, CWE and CVSS and can work on prioritizing the security related issues with high-risk scores and work with development and QA team to fix the security issues and execution of security test cases.

Requirements

Excellent documentation and communication skills
Deep understanding of Threat modeling and Risk Assessment
Good understanding of cloud environments and security
Certifications: CEH, CISSP, AZ500