partner with product and engineering teams to integrate security into architecture, design, and development processes
conduct threat modeling, security reviews, and risk assessments for new and existing products
deliver product release security documents, document cybersecurity status and process in accordance with regulations
identify, triage, and drive remediation of vulnerabilities in applications and infrastructure
support product-related security incidents and coordinate with internal stakeholders for resolution
educate developers and product managers on secure development practices and emerging threats
ensure products meet internal security standards and external compliance requirements (e.g., HIPAA, HITRUST, SOC 2, ISO 27001)

Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
5-8 years of experience in application/product security
proficiency in threat modeling and vulnerability management
experience analyzing/detecting and remediating cybersecurity issues
experience in security/network/system administration/development or equivalent knowledge
familiarity with cloud platforms (AWS, Azure, GCP) and container security (Docker, Kubernetes)
strong communication skills and ability to influence cross-functional teams
relevant certifications (e.g., OSCP, CISSP, CSSLP) are a plus

Cyber Security Engineer

Key skills