Basic Qualifications
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
- Minimum 5+ years of hands-on experience in Cybersecurity Engineering, Application Security, or Information Security.
- At least 5+ years of experience implementing security controls and secure software development lifecycle (SSDLC) practices.
- Experience performing threat modeling, risk assessments, vulnerability management, and penetration testing.
- Experience conducting application security reviews, including static and dynamic code analysis.
- Hands-on experience with security tools such as Qualys, SonarQube, Detectify, GitHub Advanced Security, or equivalent solutions.
- Strong understanding of information security frameworks, methodologies, standards, and best practices.
- Experience securing cloud environments, web applications, APIs, and enterprise platforms.
- Experience implementing and maintaining regulatory compliance requirements including GDPR, CPRA, SOX, and PCI-DSS.
- Strong understanding of secure software engineering principles and common programming languages.
- Experience working in Agile/Scrum environments and collaborating with cross-functional teams.
- Strong analytical, troubleshooting, risk assessment, and problem-solving skills.
- Ability to communicate technical security concepts effectively to both technical and non-technical stakeholders.