Senior Cybersecurity Engineer - Cloud Focused

- Develop and produce cybersecurity documentation for software product releases, including SBOMs and vulnerability remediation evidence, and lead technical assessments with development teams to address vulnerabilities and security measures. - Determine prioritization for vulnerability remediation and patching efforts based on business impact, proof of exploit, and policy needs in collaboration with engineering, product managers, and product owners to ensure timely risk mitigation. - Create and recommend organizational remediation strategies and preventive measures to decrease recurring vulnerabilities, such as secure coding practices, dependency management, and configuration hardening across products and related applications. - Analyze and evaluate results from various security scanning tools to assess the genuine security impact, verify exploitability, and identify false positives. - Confirm security fixes through practical testing, including web application testing with tools like Burp Suite and Postman, as well as validating remediation for iOS and Android application vulnerabilities. - Effectively communicate intricate technical security concepts to executive leadership and stakeholders, translating vulnerability findings and security controls into business-relevant insights and aid for decision-making. - Direct remediation initiatives following security assessments that identify weaknesses needing attention, and assist in advancing the cyber threat and vulnerability management program to ensure ongoing identification, evaluation, response, and monitoring of cybersecurity threats and vulnerabilities. - Use JIRA for managing security projects and vulnerabilities, creating dashboards, reports, and automation workflows to monitor remediation status and enhance security metrics visibility while facilitating coordination among cross-functional teams. - Engage with cross-functional teams to attain established security objectives and comply with technical requirements in support of detailed implementation strategies for security initiatives, providing technical insight and training on potential security risks and preventive measures.