Cybersecurity Subject Matter Expert

Role & Responsibilities

• Provide cybersecurity expertise and guidance across products, platforms, cloud services, and software engineering initiatives.
• Drive Security-by-Design and Secure SDLC practices throughout the product lifecycle.
• Conduct threat modeling, security assessments, and security architecture/design reviews.
• Define and implement Application/Product Security standards and controls.
• Integrate security practices into DevSecOps and CI/CD pipelines using SAST, DAST and SCA.
• Assess and strengthen AWS/Azure cloud security and cloud-native environments.
• Guide container and Kubernetes security for modern application platforms.
• Review and secure APIs, microservices, authentication and authorization mechanisms.
• Collaborate with Architects, Engineering, DevOps, QA, Product Management and Cybersecurity teams to identify and mitigate security risks.
• Provide technical guidance on vulnerabilities, secure coding, remediation and security best practices.
• Support penetration testing, vulnerability assessments and security validation activities.
• Establish cybersecurity standards, controls and governance aligned with organizational and industry requirements.

Preferred Candidate Profile

• 715 years of experience in Cybersecurity, Product Security, Application Security or Security Engineering.
• Strong hands-on experience in Application/Product Security and Secure SDLC.
• Proven experience with Threat Modeling, preferably STRIDE/PASTA.
• Strong understanding of Security Architecture and Security-by-Design.
• Hands-on experience with AWS and/or Azure Cloud Security.
• Strong knowledge of DevSecOps and CI/CD security integration.
• Experience with SAST, DAST and SCA tools and security gates.
• Good understanding of Docker, Kubernetes and Container Security.
• Strong knowledge of API and Microservices Security.
• Good understanding of OWASP Top 10 and common application security vulnerabilities.
• Strong analytical, problem-solving and communication skills with the ability to work independently as a technical SME.
• Security certifications such as CISSP, OSCP, CEH, CSSLP are an advantage.