> Markdown version of [/jobs/ext/2502219-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/2502219-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** Delta Defense LLC - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $100,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, JavaScript (Programming Language), PHP (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Business Logic, Software System Penetration Testing, Audit Trail, Burp Suite, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Code Review, Cyber Security, Continuous Integration, Information Engineering, Data Infrastructure, Information Leak Prevention, DevOps, Digital Forensics, Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Key Management, PostgreSQL, Open Web Application Security, PCI Data Security Standards, Performance Tuning, Systems Development Life Cycle, Digitalocean, Zero Trust Network Access, Secure Coding, Security Information and Event Management, Software Engineering, Systems Integration, Tableau (Software), Software Vulnerability Management, Web Applications, Scripting, Google Cloud, Cloud Platform System, Data Classification, Informatica Powercenter, Large Language Models, Snowflake, Sonatype, Software Security, Mitre Att&ck, Generative AI, Gitlab, Build Management, GWAPT, AI Platforms, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Hashicorp, Cloudflare, Enterprise Integration, Apache Kafka, Data Management, CIS Benchmarks, Cyber Warfare, Security Orchestration, Automation & Response, Static Application Security Testing, Databricks, Golang, Dynamic Application Security Testing - **Published:** August 31, 2026 - **Apply:** https://www.dice.com/job-detail/5289aad8-5cd5-4e4f-80e5-94b3e76aac58 ## About the Role * Deep cybersecurity engineering capability across application security, cloud and infrastructure security, data platform security, detection engineering, and vulnerability management, with practical experience securing modern cloud-first environments and large-scale SaaS and data platforms. * Hands-on application security experience with SAST, DAST, SCA, secure code review, API security, WAF tuning, threat modeling, CI/CD security, and secrets management using tools such as Doppler, Semgrep, Snyk, Burp Suite, OWASP ZAP, Cloudflare, HashiCorp Vault, or equivalent. * Proficient in at least one programming or scripting language with the ability to read, write, and exploit code in a security context; Python, JavaScript, PHP, Golang, or Rust preferred. * Working knowledge of AI security risks and controls, including prompt injection, indirect prompt injection, model abuse, data leakage, agentic workflow vulnerabilities, OWASP LLM Top 10, MITRE ATLAS, and emerging AI security tooling. * Practical cloud and infrastructure security experience across DigitalOcean, AWS, Google Cloud Platform, Kubernetes, IAM, CSPM, IaC scanning, container security, zero-trust/SASE architectures, and security tooling such as EDR, SIEM, CASB, SWG, DLP, IDS/IPS, and PAM. * Communicates risk clearly in business terms, influences cross-functional stakeholders without direct authority, stays composed and decisive during active incidents, drives remediation to closure, and demonstrates the Core Values of Delta Defense, LLC., * Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field preferred; equivalent work experience and relevant certifications may be considered in lieu of a degree. * Minimum 3 years of cybersecurity engineering experience working closely with application, software, data engineering, DevOps, cloud, infrastructure, or security operations teams. * Experience securing applications, APIs, cloud platforms, CI/CD pipelines, Kubernetes environments, data platforms, and modern engineering ecosystems using technologies such as JavaScript, PHP, PostgreSQL, Kafka, NeonDB, GitLab, Python, Snowflake, dbt, Fivetran, Databricks, Tableau, Informatica, Kestra, or related technologies. * Strong understanding of security frameworks and control models, including NIST CSF, CIS Controls, PCI DSS, Cyber Defense Matrix, ISO 27001, OWASP, and MITRE ATT&CK. * Preferred certifications include CCSP, CASP+, Security+, CEH, GPEN, GWAPT, or other relevant cloud, application security, AI security, offensive security, or security engineering certifications. Please note that applicants must be authorized to work in the United States without the need for current or future sponsorship. ## Description You are the kind of engineer who stays curious when no one is watching. You read threat intelligence because understanding the adversary is how you stay ahead of them. When something is compromised, you run toward it. You care more about getting it right than getting credit for it. You have likely seen what happens when strong security talent gets trapped in slow, rigid organizations where good ideas stall, risk decisions lack context, and the work feels disconnected from the people it is supposed to protect., * Application Security & Secure SDLC: Lead application security across the software development lifecycle by partnering with Engineering and DevOps to integrate security into design, development, testing, and deployment. Perform threat modeling, secure design reviews, code reviews, and implement automated SAST, DAST, SCA, and secrets detection within CI/CD pipelines while enabling engineering teams to deliver secure software at scale. * Web App & API Security: Design, implement, and continuously improve web application and API security controls across the enterprise. Develop and tune WAF policies, conduct API security assessments, identify business logic vulnerabilities, and establish secure-by-design standards that reduce risk without unnecessarily impacting developer velocity. * Penetration Testing & Offensive Security: Plan and execute penetration testing activities against web applications, APIs, cloud environments, and supporting infrastructure. Validate vulnerabilities through manual testing, prioritize findings based on business risk, and partner with engineering teams to ensure timely remediation and measurable risk reduction. * AI Security & Governance: Develop and enforce security controls governing enterprise AI platforms and internally developed AI capabilities. Establish policies for data classification, model usage, access controls, audit logging, and secure integration of AI technologies while ensuring responsible adoption across the organization. * AI Threat Modeling & Security Engineering: Perform security assessments of Retrieval-Augmented Generation (RAG), agentic AI systems, MCP integrations, and large language model applications. Identify and mitigate risks including prompt injection, indirect prompt injection, insecure tool use, excessive agent permissions, model abuse, and data leakage using industry guidance such as the OWASP LLM Top 10 and MITRE ATLAS. * IR & Detection Engineering: Contributes to technical investigation and response activities for security incidents including threat analysis, digital forensics, containment, eradication, and root cause analysis. * Vulnerability Management: Operate a risk-based vulnerability management program that prioritizes remediation based on exploitability, business impact, and threat intelligence rather than scanner severity alone. Measure remediation effectiveness, track risk reduction, and ensure security controls align with frameworks including NIST CSF, CIS Controls, OWASP, PCI DSS, and organizational security standards. * Cloud & Infrastructure Security: Contributes to maintenance of secure cloud environments across AWS, Google Cloud, and DigitalOcean. Design and implement cloud security architecture including IAM, Kubernetes security, container security, Infrastructure-as-Code security scanning, secrets management, workload protection, and Zero Trust network controls. * Security Automation & Platform Engineering: Design and build security automation that improves operational efficiency and security outcomes using scripting, APIs, Infrastructure as Code, and AI-assisted workflows. Develop integrations between security platforms, automate repetitive security processes, and leverage AI responsibly to enhance detection, investigation, and response while maintaining appropriate governance and oversight. * Technical Leadership & Security Advisory: Serve as a trusted technical advisor across Engineering, Infrastructure, and Product teams by providing security guidance, mentoring engineers, evaluating emerging technologies, and translating complex security risks into practical engineering solutions. Continuously research evolving threats, techniques, and defensive capabilities to improve the organization's overall security posture. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)