Description

You will integrate security and privacy capabilities into the product development lifecycle and cloud operations in the USA (remote).

Responsibilities

• Develop security-as-code and policy-as-code pipelines to automate security controls.
• Manage 1st and 3rd party vulnerabilities by evaluating criticality and providing remediation guidance to product teams.
• Conduct threat modeling, vulnerability monitoring, and on-demand security testing.
• Automate technical workflows for investigations, assessments, and incident response.
• Optimize playbooks and tools for vulnerability management, threat intelligence, and security testing.

Required Skills

• 5+ years of experience in security and privacy roles.
• Hands-on experience with Jenkins, Docker, and GCP.
• Proficiency in Python and shell scripting for security automation.
• Experience with SAST and DAST tools including Checkmarx, Snyk, Mayhem, BurpSuite, and ZAP.
• In-depth knowledge of threat modeling and vulnerability handling pre and post-market launch.
• Experience with system and cloud infrastructure hardening.
• Ability to develop Terraform, K8s manifests, or other forms of infrastructure as code.
• Experience with Sigstore, SBOM, SLSA, and secure software supply chain management.
• Understanding of ISO 27000 family and HITRUST standards.

Preferred Skills

• Relevant certifications such as CISSP or CEH.

Key Skills

Education

Any Gradute