Cybersecurity Strategist

A seasoned cybersecurity professional is needed to lead initiatives in application and cloud security. The ideal candidate will have hands-on experience with tools like Prisma, Burpsuite, Qualys, a solid grasp of cloud and application security principles, and the ability to drive secure development practices across teams.

Key Responsibilities:

• Conduct comprehensive security assessments for web and mobile applications, including Blackbox, Greybox, and Whitebox testing.
• Review application architecture during major changes or new integrations, evaluating security aspects and providing recommendations.
• Collaborate with development and infrastructure teams to embed security controls early in the design phase.
• Identify and suggest mitigation of vulnerabilities aligned with OWASP Top 10 and other frameworks.

• Participate in the Change Advisory Board (CAB) to review and approve changes from a security perspective.
• Provide detailed risk analysis and security recommendations for proposed changes and integrations.
• Ensure that all changes comply with internal security policies and regulatory standards.

• Review cloud configurations and architecture for basic security hygiene and compliance.
• Provide guidance on secure usage of cloud-native services across AWS, Azure, Oracle, or GCP.
• Support teams in leveraging CSPM tools for posture management and visibility.

• Utilize scripting (Python/Bash) to automate security tasks and integrate tools.
• Manage vulnerability scanning and remediation workflows using tools like Qualys.

Requirements:

• 5–8 years of experience in Application and Cloud Security, with team management exposure.
• Strong understanding of secure architecture design and change management processes.
• Experience in reviewing and integrating security controls for new applications.
• Hands-on experience with vulnerability management tools (e.g., Qualys).
• Familiarity with cloud platforms and basic cloud security principles.
• Proficiency in scripting for automation and tool integration.
• Excellent communication and stakeholder management skills.

Preferred Qualifications:

• Certifications such as AWS Certified Security Specialist, EJPT, CISSP, CISM or equivalent.
• Exposure to DevSecOps practices and CI/CD pipeline security.
• Understanding of regulatory standards like ISO 27001, PCI-DSS, and SOC2.