Role : Senior Cyber Security Engineer

Job Overview :

We are seeking an experienced cybersecurity professional with expertise in security risk assessments, security architecture reviews, threat modelling, cloud security, and third-party risk management.

The ideal candidate will be responsible for identifying security risks, evaluating enterprise security controls, recommending mitigation strategies, and ensuring compliance with established security frameworks and organizational policies.

The role involves working across enterprise applications, cloud environments, SaaS platforms, APIs, and emerging AI solutions to strengthen the organization's security posture and support effective risk governance.

Key Responsibilities :

- Conduct Security Risk Assessments (SRA) for enterprise applications, cloud platforms, SaaS solutions, APIs, and emerging AI technologies.

- Perform Security Architecture Reviews to identify design-level security gaps and recommend appropriate security controls.

- Develop and execute threat modelling exercises using methodologies such as STRIDE to identify potential threats and attack vectors.

- Assess cloud security configurations and architectures across AWS, Microsoft Azure, and Google Cloud Platform (GCP).

- Support Third-Party Risk Management (TPRM) activities, including vendor security assessments, control reviews, and risk remediation tracking.

- Evaluate security controls against ISO 27001, NIST frameworks, and relevant industry standards.

- Conduct vulnerability assessments, analyze findings, prioritize risks, and coordinate remediation activities with technical teams.

- Maintain risk registers, assessment reports, remediation plans, and governance documentation.

- Collaborate with application development, infrastructure, cloud, enterprise architecture, and compliance teams to address identified security risks.

- Monitor remediation progress, validate corrective actions, and escalate unresolved or high-risk security issues to relevant stakeholders.

- Support security audits, compliance reviews, and risk governance initiatives.

- Assess security risks associated with APIs, integrations, third-party platforms, and AI-enabled applications.

- Provide practical recommendations to improve security architecture, risk management processes, and organizational security controls.

Required Skills and Qualifications :

- Strong experience in cybersecurity, information security, security risk assessments, or security assurance.

- Hands-on experience conducting Security Risk Assessments and Security Architecture Reviews.

- Practical knowledge of threat modelling methodologies, particularly STRIDE.

- Understanding of cloud security principles and controls across AWS, Azure, and GCP.

- Experience with Third-Party Risk Management (TPRM) and vendor security assessments.

- Knowledge of ISO 27001, NIST Cybersecurity Framework, and related security control standards.

- Experience with vulnerability assessment, risk prioritization, remediation tracking, and security compliance.

- Ability to assess security risks across enterprise applications, cloud infrastructure, SaaS platforms, and APIs.

- Understanding of security governance, risk registers, control effectiveness, and audit documentation.

- Strong analytical, problem-solving, documentation, and stakeholder management skills.

- Ability to communicate technical security risks and remediation recommendations to technical and non-technical stakeholders.

Preferred Qualifications :

- Relevant certifications such as CISSP, CISM, CISA, CCSP, or ISO 27001 Lead Implementer/Auditor.

- Experience assessing security risks in AI-enabled applications and emerging technology environments.

- Familiarity with cloud security best practices, secure architecture principles, and application security controls.

- Experience working in enterprise environments with established risk governance and compliance processes.