Senior Cyber Security Analyst

What you'll do

• Define and mature the Product Security program's long-term strategy, processes, and roadmap.
• Serve as a technical advisor to agile development teams during sprint discussions and backlog grooming.
• Lead security design reviews and secure code reviews for new features and architectures.
• Facilitate threat modeling sessions and produce actionable risk documentation and mitigation plans.
• Manage the configuration and tuning of SAST, DAST, and SCA tools within the CI/CD pipeline.
• Oversee end-to-end vulnerability identification, triage, prioritization, and remediation tracking for product teams.
• Apply cloud security principles to support migration to public cloud environments like GCP.
• Provide technical mentorship and guidance to junior team members to grow collective capabilities.

What we're looking for

• Bachelor's degree in computer science, information systems, or a related field.
• Four years of experience in IT information security.
• Proficiency in at least one programming language such as Python, Java, Go, or C#.
• Experience with security tooling in a CI/CD pipeline including SAST, DAST, and SCA (preferred).
• Familiarity with common vulnerability classes like OWASP Top 10 and CWE Top 25 (preferred).
• Experience with cloud-native architectures, container security, and Kubernetes (preferred).
• Relevant security certifications such as CSSLP, GWEB, GWAPT, or GPEN (preferred).
• Familiarity with security requirements in a regulated or critical infrastructure industry (preferred).