Key management and secrets handling
Review application architectures and APIs for security weaknesses and design flaws.
Conduct third-party/vendor security assessments, ensuring risks are identified and mitigated.
Partner with engineering teams to remediate findings and improve system design.
Establish and evolve secure design patterns and guidelines for developers.
Integrate security into design and development workflows (shift-left).
Evaluate and secure AI/ML use cases, including risks such as data leakage and prompt injection.
Contribute to security standards, policies, and best practices across the organization.
Required Qualifications
8–12+ years of experience in security engineering or application security.
Strong expertise in threat modeling and secure system design.
Deep understanding of
Application security principles (OWASP Top 10, API security)
Data protection and privacy concepts
Authentication and authorization mechanisms
Experience conducting architecture and design-level security reviews.
Ability to read and understand code across common languages.
Strong communication skills to influence engineering teams.
Preferred Qualifications
Experience in cloud environments (Azure preferred).
Familiarity with secure SDLC practices and DevSecOps tooling.
Experience with regulated environments (e.g., healthcare, finance).
Knowledge of AI/ML security risks.
Relevant certifications (e.g., CISSP, CSSLP).
What We’re Looking For
Strong analytical thinker who can identify risks early in design.
Ability to translate security into practical engineering guidance.
Comfortable working across teams and influencing decisions.
