Cybersecurity Engineer

The Cybersecurity Engineer is responsible for the security of software applications, IT systems, and ensuring security best practices throughout Business Wire. This role involves assessing, identifying, and mitigating vulnerabilities in web applications, cloud, and IT systems. This position works closely with development teams to integrate security best practices during the software development process, from design to deployment. The engineer is also tasked with educating technical and non-technical personnel about threats such as library exploits, phishing attacks, and social engineering.

• Assist in conducting application and cloud security assessments to identify potential risks and vulnerabilities.
• Collaborate with security and development teams to integrate security testing into the Software Development Life Cycle (SDLC) and support vulnerability management efforts.
• Support the development of cloud security architecture, ensuring it aligns with industry standards and best practices.
• Assist in triaging vulnerabilities and be engaged in engineering prioritization of findings.
• Conduct security assessments and assist in threat modeling exercises, contributing to the identification of potential security risks.
• Assist in vulnerability management by helping with penetration testing, remediation efforts, and security controls implementation.
• Help maintain security documentation and reports to ensure security requirements are followed during product development.
• Support incident response activities, assisting in investigating and resolving application security incidents.
• Collaborate with cross-functional teams to promote security awareness and follow established security best practices.
• Conduct educational exercises on security best practices, phishing, and social engineering.
• Support the continuous improvement of security tools, dashboards, and other resources for monitoring and improving product security.

• 2 – 4 years of experience in application security with knowledge of AWS.
• Hands-on experience in designing secure Infrastructure solutions for AWS as well as on-prem applications, demonstrating proficiency in architecting robust and scalable security measures within cloud and on-prem environments.
• Understanding of security testing tools such as GitHub Advanced Security to encompass Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), utilizing these tools effectively to identify and address potential vulnerabilities proactively.
• Experience in training and providing educational materials to increase security maturity.
• Experience in application security automation and interjecting security into Continuous Integration/Continuous Deployment (CICD).
• Expertise in technical assessments, threat modeling, and cloud security architecture.
• Knowledge of software security best practices, penetration testing, vulnerability management, and remediation advisory.
• Demonstrated proficiency in investigating and effectively managing security incidents pertaining to applications operating within AWS and on-prem environments.
• Strong problem-solving abilities and a deep understanding of cybersecurity principles and practices.
• The ability to communicate complex security concepts to technical and non-technical stakeholders.
• Previous software development experience is a plus.
• A Bachelor’s degree in computer science or a related field.