Senior Cybersecurity Engineer
Posted Updated
Description
- The Senior CyberSecurity Engineer is a key technical leader responsible for defining and driving the strategic direction and implementation of security controls across the organization’s infrastructure
- This role requires deep technical expertise in infrastructure security and strong coding/automation skills to industrialize compliance and security processes
- The Senior Engineer is expected to lead complex projects, mentor junior staff, and significantly influence security governance decisions
- Champion the principle of translating security policies directly into testable, automated code to ensure non-bypassable compliance
- Design and execute the roadmap for industrializing and automating security governance, compliance verification, and control enforcement across the organization
- Drive the adoption of DevSecOps principles by embedding security controls directly into the CI/CD pipeline and contributing secure, reusable modules (e.g., secure Terraform/CloudFormation modules) for engineering teams
- Ability to lead technical security initiatives end-to-end, from conceptual design through successful implementation
- 7+ years of progressive, hands-on experience in engineering, with a strong emphasis on security architecture, leading complex security initiatives, and developing advanced security solutions with 2+ years focused on security governance/compliance
- Extensive and deep hands-on experience architecting, implementing, and securing infrastructure and services within major cloud service providers (e.g., AWS, GCP, Azure) at scale
- Exceptional communication, presentation, and interpersonal skills with the ability to influence and align senior leadership, diverse engineering teams, and non-technical stakeholders
- A deep, expert-level understanding of network, application, and platform security, including advanced threat landscapes, attack vectors, and mitigation techniques
- Relevant industry certifications (e.g., AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS)) or equivalent focused training
- Proven experience in architecting, implementing, and evangelizing secure Infrastructure as Code (IaC) practices and automation at scale using tools like Terraform, CloudFormation, etc
- Strong proficiency in at least one scripting language (e.g., Python, Go, Bash, Ruby) with the ability to develop automation for security operations, configuration management, and compliance
- Proven ability to analyze complex technical security problems and propose pragmatic, business-enabling solutions
- Expert-level understanding and practical application of cloud security concepts, principles, architectures, and technologies, with a proven track record of designing and implementing robust, enterprise-grade security controls in complex, multi-cloud environments
- Exceptional ability to communicate highly technical security risks and compliance requirements into clear, quantitative business terms for executive leadership
- Proven experience implementing, auditing, and maintaining controls for major compliance frameworks (NIST CSF, ISO 27001)