Senior Cybersecurity Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Create and produce cybersecurity artifacts for product software releases, including SBOMs, evidence of vulnerability remediation, and security documentation for releases.

• Facilitate technical reviews with development teams to address vulnerabilities, security controls, remediation progress, and residual risk.

• Assess and prioritize vulnerability remediation and patching initiatives based on business impact, exploit proof, and policy requirements, collaborating with engineering, PMs, and product owners to ensure timely risk mitigation.

• Develop and propose systematic remediation strategies and preventive controls to minimize recurring vulnerabilities, focusing on secure coding practices, dependency management, and configuration hardening across products and supporting applications.

• Confirm security fixes through practical testing.

• Expertise in a specific area of product security, such as web application testing utilizing tools like Burp Suite and Postman, hardware testing, or verification/testing of remediation efforts for iOS and Android mobile application vulnerabilities.

• Effectively convey complex technical security concepts to executive leadership and cross-functional stakeholders, translating vulnerability findings, security controls, and metrics into business-relevant risk insights and decision support.

• Oversee remediation activities following security assessment findings that identify weaknesses needing attention.

• Contribute to the enhancement of the cyber threat and vulnerability management program to ensure consistent identification, analysis, response, and monitoring of cybersecurity threats, events, and vulnerabilities.

• Utilize JIRA for the management of security projects and vulnerabilities, creating dashboards, reports, and automation workflows to track remediation progress, improve visibility of security metrics, and facilitate coordination across cross-functional teams.

• Evaluate findings from application, network-based, and agent-based security scanning tools (SAST, DAST, SCA, infrastructure scanners) to ascertain actual security impact, verify exploitability, and identify false positives.

• Articulate residual risk and remediation activities to both technical and non-technical audiences.

• Engage in cross-functional team coordination to reach established security objectives and meet technical requirements in support of detailed implementation plans for security projects.

• Offer technical advice and training regarding potential security risks and prevention strategies.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related discipline.

• At least 5 years of relevant professional experience, including a minimum of 2 years in cybersecurity, information security, software security, IT, engineering, or a similar field.

• A self-motivated individual who can identify and implement comprehensive AI workflows through custom models, skills, and agentic development to mitigate vulnerability risk and enhance processes.

• Proven hands-on experience in conducting security testing for web, mobile, and cloud infrastructure, utilizing DAST, SAST, SCA, SBOM generation tools, and network and agent-based vulnerability scanning tools.

• Strong organizational skills with the ability to manage multiple projects effectively.

• Demonstrated critical thinking, analytical skills, sound judgment, and logical reasoning for problem-solving and decision-making in a dynamic environment with shifting priorities.

• Capability to work efficiently in a team setting, adapting to rapidly evolving business and technological demands.

• Exceptional documentation, communication, and interpersonal skills.

• Preferred: Actively pursuing or holding one or more industry-recognized cybersecurity certifications, such as CISSP, CISM, CEH, or equivalent.

• Previous experience in a cybersecurity role that supports product development, secure product design, or product security engineering.

• Familiarity with the design, development, and cybersecurity standards of diagnostic equipment, medical devices, or other regulated technology products.

🏝️ Benefits

• Opportunities for career advancement within an international organization.

• Employees may qualify for complimentary medical coverage in our Health Investment Plan (HIP) PPO medical plan in the upcoming calendar year.

• A robust retirement savings plan with substantial employer contributions.

• Tuition reimbursement program.

• The Freedom 2 Save student debt initiative and FreeU education benefit - an accessible and convenient route to obtaining a bachelor’s degree.

• A company recognized as a top workplace in numerous countries and honored as one of the most admired organizations globally by Fortune.

• A workplace acknowledged as one of the best large companies to work for, as well as a leader in diversity, support for working mothers, female executives, and scientists.