Job Description: Security Analyst / Security Engineer

We are seeking a skilled Security Analyst / Security Engineer to strengthen our organization’’s cybersecurity posture. The ideal candidate will have experience in application security, vulnerability management, incident response, and collaborating with cross-functional security and engineering teams. This role is responsible for identifying, assessing, and mitigating security risks while ensuring compliance with organizational security standards and industry best practices., * Perform application security assessments, including secure code reviews and vulnerability identification.

• Conduct vulnerability assessments and coordinate remediation efforts with development and infrastructure teams.
• Monitor, investigate, and respond to security incidents, ensuring timely containment and resolution.
• Analyze security alerts from SIEM, EDR, IDS/IPS, and other security monitoring tools.
• Collaborate with development, DevOps, infrastructure, and security teams to integrate security throughout the software development lifecycle (SDLC).
• Support penetration testing activities and validate remediation of identified vulnerabilities.
• Assist in threat modeling, risk assessments, and security architecture reviews.
• Develop and maintain security policies, standards, and technical documentation.
• Participate in incident response planning, forensic investigations, and post-incident reviews.
• Recommend and implement security controls to reduce organizational risk.
• Stay informed about emerging threats, vulnerabilities, and industry best practices.

• Bachelor’’s degree in Computer Science, Information Security, Cybersecurity, or a related field.
• 7 years of experience in information security, application security, or security engineering.
• Strong understanding of application security principles and the Secure SDLC.
• Experience with vulnerability management tools such as Tenable, Qualys, Rapid7, or similar.
• Hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar) and endpoint security solutions.
• Knowledge of web application security concepts, including the OWASP Top 10.
• Familiarity with common security testing tools such as Burp Suite, Nessus, Nmap, OWASP ZAP, or similar.

• Understanding of authentication, authorization, encryption, and identity management concepts. *

• Salesforce exp. is required