About the position
The Principal Cybersecurity Engineer will ensure that clients' software, systems, and infrastructure are designed and implemented to the highest security standards. This role involves performing technical security assessments, code reviews, and vulnerability testing to identify risks and remediate findings. The engineer will act as a subject matter expert, driving vision and results to enhance security across various technologies, including mobile devices, IoT, cloud, and enterprise applications. The position requires collaboration with engineering and operations teams to address security vulnerabilities and implement improvements.
Responsibilities
- Perform technical security assessments, code reviews, and vulnerability testing.
- Collaborate with client engineers to design proactive security measures.
- Lead information security reviews of new technologies and remediation planning efforts.
- Investigate and identify security needs, recommending plans and resolutions.
- Implement, test, and monitor information security improvements.
- Create technical specifications and requirements independently.
- Present advanced security concepts to leadership and cross-functional teams.
Requirements
- Significant experience with threat identification and analysis.
- Expertise in threat modeling approaches such as STRIDE, PASTA, and DREAD.
- Advanced understanding of IP/Security solutions applicable to Wireless Network Architecture.
- Strong verbal and communication skills with diverse groups.
- Ability to adapt to new technologies related to products and services.
- Knowledge of federal and compliance regulations (e.g., SOX, PCI).
- Experience with web application development and RESTful APIs.
Nice-to-haves
- Experience with mobile applications and handset security.
- Familiarity with various security tools and technologies (e.g., firewalls, SIEM).
- Knowledge of scripting tools (Python, Perl, Shell).
