> Markdown version of [/jobs/ext/2925277-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/2925277-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer

- **Company:** Alchemy Software Solutions LLC
- **Location:** San Jose, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Unit Testing, C++ (Programming Language), Code Generation, Profiling, Code Review, Software Debugging, Fuzz Testing, Python (Programming Language), Open Web Application Security, Secure Coding, Software Deployment, Data Streaming, Tenable Nessus, Golang, Microservices
- **Published:** September 15, 2026
- **Apply:** https://www.dice.com/job-detail/4fb813f2-0c1f-4de3-be65-f68f796fea4e

## About the Role

· Understanding architectural trust boundaries, attack surfaces, data flows, and threat modeling frameworks (e.g., STRIDE, PASTA).

· Working knowledge of common vulnerability classifications (CWE, CVE, OWASP Top 10) and SLA mapping.

· Proficiency in reading and writing code in at least two core languages (C++, Go, Java, Python) and building test harnesses/PoCs.

· Strong code review skills (identifying regressions, hallucinations) and knowledge of secure coding standards.

Nice-to-Have / Advanced Skills

· Experience with threat model reviews for large distributed / microservice architectures.

· Experience managing vulnerability queues, automated scanning tools, and compliance with exception reviews.

· Practical experience with fuzzing, unit test frameworks, sandbox execution, and cross-boundary debugging.

· Experience prompt-tuning automated code generation tools, differential testing, and patch validation.

## Description

Threat Modeling & Asset Profiling

Document trust boundaries, data flows, and architectural entry points for high-priority services; maintain up-to-date threat profiles in centralized repositories.

Vulnerability Triage & Policy Management

Review and filter scanner findings, classify severity, and evaluate exception requests against security policies.

Reproduction & PoC Validation

Construct minimal test environments/harnesses to validate reported findings and confirm viable vulnerabilities vs. false positives.

Automated / Agentic Fixer Oversight & QA

Supervise and validate code patches generated by automated remediation agents, executing tests and inspecting diffs for regressions.

Product Team Coordination & Closure

Route validated patches to code owners and shepherd fixes through code review to production deployment.


## Related Videos

- [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall)
- [Profiling Symfony & PHP apps with Blackfire](https://www.wearedevelopers.com/videos/265-profiling-symfony-php-apps-with-blackfire)
- [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Scoring 2000 Products per Request: Performance Pitfalls in Golang](https://www.wearedevelopers.com/videos/2073-scoring-2000-products-per-request-performance-pitfalls-in-golang)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data)