Sr. Cyber Security Engineer

• Collaborate with development and DevOps teams to integrate security into every aspect of our SaaS platform and infrastructure.
• Provide expert guidance on security best practices, helping teams navigate security challenges with innovative and effective solutions.
• Evaluate and enhance the security of our AWS-based infrastructure, ensuring it meets the highest standards for protecting customer data.
• Lead by example in fostering a culture of security awareness across all teams.
• Conduct security reviews of codebases, particularly in Python, to identify vulnerabilities and recommend improvements.
• Assess and provide guidance on the security implications of machine learning models and techniques used within our platform.
• Lead security incident response efforts, ensuring timely investigation and resolution of security breaches.
• Develop, implement, and continuously improve security policies, procedures, and guidelines.
• Mentor and guide junior security engineers, and act as a trusted advisor to other team members on security matters.
• Stay informed about the latest cybersecurity trends, threats, and technologies, and apply this knowledge to improve our security posture.

Requirements:

• 5+ years of experience in cybersecurity roles, with a focus on cloud security, application security, or DevSecOps.
• Strong understanding of AWS security practices, including IAM, VPC, security groups, encryption, and monitoring.
• Proficiency in reading and reviewing Python code for security vulnerabilities.
• Familiarity with machine learning techniques and the ability to evaluate their security implications.
• Proven ability to work collaboratively across teams, providing guidance and fostering a security-first mindset.
• Experience with security tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection.
• Knowledge of common security frameworks and standards (e.g., ISO 27001, NIST, CIS).
• Relevant industry certifications (e.g., CISSP, CISM, AWS Certified Security) or vendor-specific training preferred but not required.
• Excellent problem-solving skills and the ability to think strategically about security challenges.
• Strong communication and interpersonal skills, with the ability to articulate complex security concepts to both technical and non-technical stakeholders.