Senior Cyber Security Analyst

What you'll do

• Lead security design reviews and secure code reviews for new features and architectures.
• Facilitate threat modeling sessions and produce actionable risk documentation and mitigation plans.
• Manage the evaluation, configuration, and tuning of SAST, DAST, and SCA tools in the CI/CD pipeline.
• Own end-to-end vulnerability identification, triage, prioritization, and remediation tracking for assigned product teams.
• Apply cloud security principles to support public cloud migrations, including IAM and workload protection.
• Serve as a technical advisor to agile development teams during sprint discussions and backlog grooming.
• Provide technical mentorship and guidance to junior team members to grow collective security capabilities.

What we're looking for

• Bachelor's degree in computer science, information systems, or a related field, or equivalent formal training/experience.
• Four years of experience in IT information security.
• General knowledge of hardware, software, and network.
• 3+ years of hands-on experience in application security or product security (preferred).
• Proficiency in at least one programming language such as Python, Java, Go, or C# (preferred).
• Deep familiarity with common vulnerability classes like OWASP Top 10 and CWE Top 25 (preferred).
• Experience with cloud-native architectures, container security, and Kubernetes (preferred).
• Relevant security certifications such as CSSLP, GWEB, GWAPT, GPEN, or equivalent (preferred).