Cybersecurity Engineer

This role involves defining, executing, and continuously improving application security processes and standards to ensure security activities are embedded throughout the Software Development Life Cycle (SDLC). The position requires performing AI-assisted and traditional security assessments of applications, APIs, cloud workloads, repositories, and supporting infrastructure using approved security testing methodologies and tools. The candidate will also be responsible for driving remediation efforts, developing security metrics, and collaborating with various stakeholders to achieve security objectives., * Define and improve application security processes, standards, and workflows.

• Perform AI-assisted and traditional security assessments of applications and supporting infrastructure.
• Execute and manage security scanning activities across repositories.
• Analyze, validate, prioritize, and triage security findings.
• Drive remediation efforts from discovery through closure.
• Identify and reduce security debt and software supply chain exposure.
• Develop security metrics, coverage reporting, and executive dashboards.
• Leverage AI securely to accelerate security analysis and operational efficiency.
• Perform manual validation and security testing using industry-standard tools.
• Apply understanding of OWASP Top 10, secure coding principles, and common attack techniques.
• Support remediation implementation with code fixes and infrastructure updates.
• Collaborate with architects, developers, and stakeholders to communicate risks and drive security outcomes.
• Maintain Agile work items and operate within Scrum delivery processes.
• Stay current with emerging threats and industry best practices.
• Champion a security-first culture through coaching and knowledge-sharing sessions.

• Bachelor’s and/or Master’s degree in Computer Science, Cybersecurity, Information Systems, or related field, or equivalent practical experience.
• 5-7 years of hands-on application security / DevSecOps experience.
• Secure SDLC, DevSecOps, Agile, and Scrum methodologies.
• Security tooling: Burp Suite, GitHub Advanced Security, CodeQL, SAST, SCA, secret scanning, dependency analysis, and CI/CD security tooling.
• Ability to read, analyze, test, and modify production application code in Java and Python.
• Understanding of OWASP Top 10, API Security Top 10, and secure coding principles.
• Cloud security and modern application architectures.
• Safe and effective use of AI-assisted development and security tools.
• Vulnerability triage and validation skills.
• Development of security metrics and executive dashboards.

Skills

• Excellent communication, stakeholder management, and documentation skills.
• Ability to work independently across multiple applications and teams.
• Strong problem-solving mindset balancing security and business objectives.
• Collaboration and influence skills for negotiating priorities and removing blockers.
• Coaching and knowledge sharing to champion a security-first culture.
• Comfortable operating within Scrum/Agile delivery and managing own work items.

Pay Transparency: The typical base pay for this role across the U.S. is: $75.00 - $78.00 /hour. Non-exempt positions are eligible for overtime at a rate of 1.5 times the base hourly rate for all hours worked in excess of 40 in a work week, or as required by state or local law. Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education and experience. Full-time employees are eligible to select from different benefits packages. Packages may include medical, dental, and vision benefits, health savings accounts with qualified medical plan enrollment, 10 paid days off, 3 days paid bereavement leave, 401(k) plan participation with employer match, life and disability insurance, commuter benefits, dependent care flexible spending account, accident insurance, critical illness insurance, hospital indemnity insurance, accommodations and reimbursement for work travel, and discretionary performance or recognition bonus. Sick leave and mobile phone reimbursement provided based on state or local law.

Consent to Communication and Use of AI Technology: By submitting your application for this position and providing your email address(es) and/or phone number(s), you consent to receive text (SMS), email, and/or voice communication whether automated (including auto telephone dialing systems or automatic text messaging systems), pre-recorded, AI-assisted, or individually initiated from Aditi Consulting, our agents, representatives, or affiliates at the phone number and/or email address you have provided. These communications may include information about potential opportunities and information. Message and data rates may apply. Message frequency may vary. You represent and warrant that the email address(es) and/or telephone number(s) you provided to us belong to you and that you are permitted to receive calls, text (SMS) messages, and/or emails at these contacts. You also acknowledge and agree to Aditi Consulting LLC’s use of AI technology during the sourcing process, including calls from an AI Voice Recruiter. AI is used solely to gather data and does not replace human-based decision-making in employment decisions. Calls may be recorded.