Cyber Security Engineer

At Stackspot, we make complex development environments more efficient and reliable by creating, implementing, and reusing the best code for your context.

As we continue to grow and expand our cloud infrastructure, we are seeking a highly skilled and motivated Cyber Security Engineer to join our dynamic engineering team. The ideal candidate will play a crucial role in enhancing our application security posture guided by shift left security practices, with a specific focus on AI, Enterprise Development Platform and Cloud Services environment, driving the attainment of industry-recognized certifications such as ISO 27001, PCI-DSS, SOC 1 and 2, HIPAA, and FedRAMP.

Key Responsibilities:

1. AI and Enterprise Development Platform Security:
• Conduct security assessments and provide guidance on the secure development of AI applications and enterprise development platforms
• Collaborate with AI and development teams to embed security controls into the development lifecycle
• Stay abreast of the latest threats and vulnerabilities in AI and enterprise development technologies
2. Security Control Enhancement:
• Identify, evaluate, and recommend advanced security controls to strengthen our overall security posture.
• Implement and manage security tools and technologies to proactively detect and respond to security threats.
• Stay abreast of emerging security trends, technologies, and best practices, and integrate them into our cloud security framework.
3. Certification Journey:
• Lead efforts to achieve and maintain industry certifications such as ISO 27001, PCI-DSS, SOC 1 and 2, HIPAA, and FedRAMP.
• Collaborate with internal stakeholders and external auditors to ensure compliance with regulatory requirements and industry standards.
• Drive continuous improvement initiatives to enhance our security controls and practices.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Proven experience in cyber security engineering with a focus on modern applications environments
• Familiarity with industry regulations and standards including ISO 27001, PCI-DSS, SOC 1 and 2, HIPAA, and FedRAMP
• Strong understanding of security frameworks and risk management practices including OWASP and NIST

Skills:

• Hands-on experience with securing modern applications environments
• Ability to analyze complex security issues and provide effective solutions
• Proficiency in application security principles and practices.
• Proficiency in scripting and automation for security-related tasks.
• Proficiency in Python and knowledge of AWS services (Lambda/S3)
• Excellent communication and collaboration skills
• Ability to work independently and collaboratively in a team-oriented environment.
• Strong problem-solving and analytical skills
• Certifications such as CISSP, CSSLP, or similar are a plus
• Strong verbal and written communication skills in English