Security Engineer IV- REMOTE- 51875 - Broadstaff

Welcome to Broadstaff! We are one of the industry's most trusted staffing partners for all things Telecom - Wireless Infrastructure. With over 30 years of combined experience in Telecom, Energy and Technology, our team remains devoted to helping companies find great people and helping people find great jobs.
Job Description:

Responsibilities:

• Conduct security assessments on both Consumer and Business products and solutions
• Help create, define, and implement security controls and tooling
• Manage multiple projects to support internal business unit security requirements
• Work with security stakeholders in other areas of the business
• Help implement Secure Software Development Lifecycle (SSDLC) practices and automation
• Perform security design/code reviews and vulnerability assessments
• Provide security guidance to Engineering and Product teams
• Build threat models and participate in risk assessments
• Contribute to security architecture and processes for secure code development and deployment
• Provide expertise on encryption, security controls, and secure design practices
• Contribute to security policy, standards, and guidelines
• Evaluate and operationalize new technologies for securing the organization
• Assist in creating product security inventory and lifecycle
• Train and mentor new hire and Jr Product Security Architects
• Train and mentor Security Champions throughout development
• Share thought leadership in product and application security
• Create security user stories and test cases tailored to product attributes
• Support and advise product owner and development teams on technical feasibility, readiness, and compliance
• Experience with secure SDLC, governance, and compliance for PCI, FedRAMP, and NIST

Requirements:

• Bachelor's degree in a relevant field OR equivalent combination of education, training, and experience
• Experience with security requirements analysis, threat modeling, design reviews, and security best practices
• Experience with at least 3 technical disciplines, including Cloud Security, Penetration Testing, Application Security, Mobile Security, Secure Development methodologies, Software Development, and Coding

Preferred Qualifications:

• Good understanding of mobile application security
• Hands-on experience with application penetration testing
• Experience securing cloud services (e.g., AWS, Azure, GCP)
• Understanding of Docker, Kubernetes, and CI/CD pipeline
• Hands-on experience with security testing (e.g., SAST, DAST, Pen testing)
• Familiarity with OWASP Top 10, CIS Top 20
• Knowledge of authentication protocols (e.g., OID, OAuth2.0, SAML)
• Understanding of application security vulnerabilities and countermeasures
• Excellent written and verbal communication skills
• Ability to prioritize and execute multiple work streams
• Experience with application programming and software development lifecycle
• Excellent organizational and interpersonal skills
• One or more relevant certifications (e.g., CISSP, CISM, SANS, CCSK, CCSP, Ethical Hacker cert)

Broadstaff, LLC., provides equal employment opportunities to all qualified individuals without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age, national origin, physical or mental disability, military or veteran status, genetic information, or any other protected classification protected by federal, state or local laws.