Job Description :

Role & Responsibilities :

- Act as a cybersecurity SME for products, applications, platforms and cloud services.

- Perform Threat Modeling, Threat & Risk Assessment (TRA) and security risk assessments.

- Conduct security architecture and design reviews and recommend security controls.

- Drive Secure SDLC/SSDLC and security-by-design practices.

- Guide SAST, DAST, SCA and SBOM implementation across CI/CD pipelines.

- Provide hands-on guidance for AWS/Azure Cloud, Docker/Containers and Kubernetes Security.

- Drive vulnerability assessment, remediation and penetration-testing activities.

- Support security incidents and provide technical root-cause analysis.

- Develop cybersecurity standards, secure baselines and engineering guidelines.

- Work closely with Software Engineering, DevOps, QA, Architecture and Product teams.

- Provide technical mentoring and act as a strong Individual Contributor/SME.

Preferred Candidate Profile :

- 8+ years of overall experience in Cybersecurity, Software, Cloud or Platform Engineering.

- 5+ years of hands-on Product Security, Application Security or Security Architecture experience.

- Strong practical experience in Threat Modeling, TRA and Secure SDLC.

- Hands-on experience with AWS and/or Azure Cloud Security.

- Hands-on experience with Docker/Container and Kubernetes Security.

- Strong knowledge of SAST, DAST, SCA, SBOM and vulnerability management.

- Good understanding of OWASP Top 10, NIST and ISO 27001/27002.

- Strong problem-solving and independent technical ownership; this is primarily a hands-on IC role.

- Healthcare/Medical Device cybersecurity experience is an advantage.

- CISSP, CSSLP, CCSP, CKS or Azure Security certification is preferred.