Job Details:
Position: Cybersecurity Engineer (AI Security Analyst)
Location: Remote
Hire Type: Contract W2
Job Overview:
Position s Contributions to Work Group
Embed application security into SDLC by defining/improving security processes, standards, workflows, and Definition of Done criteria.
Perform AI-assisted and traditional security assessments of applications, APIs, cloud workloads, repositories, and infrastructure.
Manage repository scanning coverage (SAST, SCA, secret scanning, dependency analysis) and triage findings by exploitability, business impact, and severity.
Drive remediation from discovery through verified closure, reducing security debt and supply chain exposure.
Build security metrics, coverage reporting, and executive dashboards for leadership visibility.
Champion a security-first culture through coaching, knowledge sharing, and best practices.
Required Qualifications:
6 7 years of hands-on application security / DevSecOps experience.
Secure SDLC, DevSecOps, Agile/Scrum methodologies.
Security tooling: Burp Suite, GitHub Advanced Security, CodeQL, SAST, SCA, secret scanning, CI/CD security tools.
Ability to read/analyze/test/modify Java and Python code.
Knowledge of OWASP Top 10, API Security Top 10, secure coding principles, common attack techniques.
Cloud security, IAM, modern application architectures.
Safe/effective use of AI-assisted development/security tools.
Vulnerability triage/validation and remediation guidance.
Security metrics, coverage reporting, executive dashboards.
