Cybersecurity Engineer

Application Cybersecurity Engineer

Location:

Chicago, IL (Onsite) Duration: 13+ Months

• API Security
• AWS / Azure Cloud Security
• Java
• Python
• REST APIs
• SQL
• Jenkins
• Cucumber
• Dev Sec Ops
• Application Security

• Bachelor's degree in Computer Science or a related field with 8+ years of Information Security experience.
• OR Master's degree with 6+ years of relevant Information Security experience.

• Strong expertise in Application Security, including vulnerability identification and remediation using OWASP, CWE/CVE, and SANS Top 25.
• Extensive knowledge of Enterprise Security Architecture, Threat Modeling, Vulnerability Assessment, Risk Analysis, Defense-in-Depth, SDLC, IAM, and API Security.
• Hands-on experience securing AWS and/or Microsoft Azure cloud environments.
• Development experience in one or more programming languages such as Java, Python,.NET, JavaScript, or equivalent.
• Experience implementing automation and scripting to streamline security processes.
• Professional security certifications such as CISSP, CCSP, GWAPT, GWEB, or AWS Security Specialty are highly preferred.

• Additional certifications such as CSSLP, GISCP, or equivalent.
• Strong understanding of modern Information Security technologies and best practices.
• AI Security or AI Fluency is a plus.

The Lead Cybersecurity Engineer will partner closely with software development teams to integrate security throughout the Software Development Lifecycle (SDLC). This role focuses on securing cloud environments, enabling Dev Sec Ops  practices, and managing application and Infrastructure-as-Code (IaC) vulnerabilities.

Key Responsibilities:

• Implement and promote Security by Design principles across application development.
• Integrate security controls into Dev Ops/CI-CD pipelines.
• Manage and track application security vulnerabilities through remediation.
• Collaborate with Agile development teams to improve application security.
• Analyze, validate, and communicate security findings from tools such as CodeQL, Rapid7, Penetration Testing, and Bug Bounty Programs.
• Partner with software engineers to provide accurate remediation guidance for identified vulnerabilities.
• Act as a trusted security advisor to software engineers, architects, and product owners.
• Provide context-aware security recommendations and assist teams in documenting secure application architectures.
• Participate in security reviews and approval processes for new features and remediation efforts.
• Configure, enable, and monitor automated security scanning tools at the repository and application level.
• Ensure security tools are properly configured and aligned with established enterprise standards.
• Coordinate penetration testing activities by gathering scope, access requirements, and managing assessment findings through the defect management process.
• Own security responsibilities for a dedicated portfolio of applications while working directly with development teams.
• Collaborate with the broader Security Engineering team to establish standards and best practices.
• Help development teams identify security gaps and implement solutions that meet enterprise security compliance requirements.

• Excellent written and verbal communication skills.
• Ability to clearly explain complex technical security concepts to both technical and non-technical audiences.
• Strong coordination and collaboration skills with cross-functional teams.
• Ability to manage multiple initiatives simultaneously in a fast-paced environment.