In this role you will drive security across the product lifecycle for an AI-powered enterprise platform. You’ll partner with engineering teams to bake security into design, development, and deployment, addressing risk early and continuously. You’ll lead threat modeling, reviews, and secure coding practices while enabling product teams with training and automation. This is an opportunity to safeguard mission-critical, cloud-based systems at scale and shape secure software delivery. You will operate as a security advocate, delivering practical, engineering-friendly security improvements.
Responsabilidades
- Secure SDLC integration with engineering teams
- Threat modeling and design reviews to identify and mitigate risks
- Security enablement through training and championing secure coding practices
- Code and CI/CD pipeline reviews with a security lens
- Vulnerability discovery and triage with remediation guidance
- Security tooling and automation to improve feedback loops
- Cross-functional collaboration with Product, SecOps, and Platform teams
- Security advocacy through documentation, workshops, and coaching
- Security automation to improve detection, response, and compliance efficiency
Requisitos principales
- 4+ years in cybersecurity or software engineering with at least 2 years in application security
- Strong understanding of software development processes and engineers language
- Proficiency in programming/scripting languages (e.g., Ruby, Java, Python, JavaScript, Bash)
- Hands-on experience with vulnerability scanners and security testing tools
- Strong knowledge of threat modeling and security architecture reviews
- AI/ML security experience including risk assessment and prevention guidelines
- Cross-functional collaboration
- Training and knowledge sharing
- Proactive security advocacy
- Ruby, Java, Python, JavaScript, Bash
- Vulnerability scanners and security testing tools
- Threat modeling and security architecture reviews