Security Manager

What do we do at Cyera ?

Cyera is reshaping the reality of cloud data security. Backed by the world’s leading cyber investors and led by a solid and dynamic team of technical and industry experts, Cyera is scaling fast and gaining incredible market traction.

Our customers trust us to keep their transactions and private information secure due to the high standards of security embedded in Cyera's technology. As we continue to innovate rapidly to meet the evolving needs of our customers, our application security program ensures that any software developed or acquired meets stringent security standards.

As a Security Manager, you will:

Integrate Security Across the Product Lifecycle:

• Embed security tools, standards, and processes into the product lifecycle (PLC).
• Ensure developers and QA personnel have the security knowledge needed for daily activities.
  
  

• Configure, troubleshoot and collaborate with teams to maintain the security of our infrastructure, software, and hardware.
• Installed and managed software to monitor systems and networks for security breaches and intrusions.
• Monitor systems for irregular behavior and implement preventive measures.
  
  

• Assist in planning, developing, implementing, and updating the company's information security strategy.
• Improve and support application security tool deployments, including static analysis and runtime testing tools.
• Enhance and maintain secure development standards.
• Support incident response and architecture review processes where application security expertise is needed.
  
  

• Manage annual penetration testing services, including expert consulting and managed services.
• Provide internal business and technology partners manual penetration testing and standards gap analysis.
• Oversee application framework and perimeter security improvement projects.
• Support Vendor Security activities to ensure third-party software and development meet Cyera's security standards.
  
  

• Incorporate threat modeling practices into the product lifecycle.
• Define security requirements for test-driven design.
• Produce metrics reporting the state of application security programs and the performance of development teams against requirements.
  
  

• A deep understanding of security concepts and the ability to communicate them effectively to diverse audiences, including business and technical leaders and individual contributors.
• A risk management approach to application security, avoiding purely academic thinking.
  
  

• Strong leadership skills with the ability to manage highly technical individuals.
• Excellent verbal and written communication skills, including experience speaking in public forums and contributing to technical publications.
  
  

• Experience with waterfall and agile development processes and integrating secure development practices into both.
  
  

• Hands-on experience writing and testing web applications and services in programming languages such as C/C++, Java, and JavaScript.
• Familiarity with a variety of development and testing tools, including Eclipse, GIT, GCC, JIRA, Subversion, Maven, ClearQuest/Case, Silk, FindBugs, HP/Fortify SCA, IBM AppScan, and HP WebInspect.
  
  

• A bachelor's degree or higher in computer science or equivalent in the industry is required.
• Ability to explain vulnerabilities and weaknesses in OWASP Top 10, WASC TCv2, and CWE 25 and discuss effective defensive techniques.
• Familiarity with industry standards and regulations, including PCI, FFIEC, SOX, and ISO27001, is desired.