Cybersecurity Engineer

Alchemy Software Solutions LLC
San Jose, CA, United States
8 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours
Job source

Tech stack

Java (Programming Language) Unit Testing C++ (Programming Language) Code Generation Profiling Code Review Software Debugging Fuzz Testing Python (Programming Language) Open Web Application Security Secure Coding Software Deployment
+4 more
Data Streaming Tenable Nessus Golang Microservices

Job description

Threat Modeling & Asset Profiling

Document trust boundaries, data flows, and architectural entry points for high-priority services; maintain up-to-date threat profiles in centralized repositories.

Vulnerability Triage & Policy Management

Review and filter scanner findings, classify severity, and evaluate exception requests against security policies.

Reproduction & PoC Validation

Construct minimal test environments/harnesses to validate reported findings and confirm viable vulnerabilities vs. false positives.

Automated / Agentic Fixer Oversight & QA

Supervise and validate code patches generated by automated remediation agents, executing tests and inspecting diffs for regressions.

Product Team Coordination & Closure

Route validated patches to code owners and shepherd fixes through code review to production deployment.

Requirements

· Understanding architectural trust boundaries, attack surfaces, data flows, and threat modeling frameworks (e.g., STRIDE, PASTA).

· Working knowledge of common vulnerability classifications (CWE, CVE, OWASP Top 10) and SLA mapping.

· Proficiency in reading and writing code in at least two core languages (C++, Go, Java, Python) and building test harnesses/PoCs.

· Strong code review skills (identifying regressions, hallucinations) and knowledge of secure coding standards.

Nice-to-Have / Advanced Skills

· Experience with threat model reviews for large distributed / microservice architectures.

· Experience managing vulnerability queues, automated scanning tools, and compliance with exception reviews.

· Practical experience with fuzzing, unit test frameworks, sandbox execution, and cross-boundary debugging.

· Experience prompt-tuning automated code generation tools, differential testing, and patch validation.

About the company

Since our inception in 2013, Alchemy has been dedicated to reshaping organizational performance through innovative IT services. With a vision to empower businesses seeking a transformative edge, we’ve positioned ourselves at the forefront of digitization and software modernization.

Our name reflects our mission: to transmute technology into gold-standard solutions for our esteemed clients. We proudly serve a diverse range of sectors, including IT and ITES, BFSI, Telecom and Media, Automotive, Manufacturing, Energy, Oil and Gas, Real Estate, Retail, Healthcare, and more.

With a global footprint spanning the USA, India, Europe, Canada, Singapore, Japan, and parts of Central and West Africa, we harness a unique blend of competencies, frameworks, and cutting-edge technologies. Together, we drive growth and innovation across industries, helping organizations turn their visions into reality.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:08 min

Building solutions with open source GoLang infrastructure tools

Jad Wahab · LIVE

47 sec

Profiling native execution calls with async-profiler

Gonzalo Ortiz Jaureguizar Gonzalo Ortiz Jaureguizar · World Congress 2026 Europe

3:39 min

Addressing code review surrender and process exploitation

Laura Tacho Laura Tacho · World Congress 2026 Europe

3:58 min

Exploring advanced security tooling and community dependency vetting

Niels Tanis Niels Tanis · World Congress 2024

6:16 min

Event-driven Golang backend architecture and cloud deployment

Irina Branovic Irina Branovic · World Congress 2026 Europe

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

Videos

See all

Related articles

See all