Principal Cyber Security Engineer

- Develop code aimed at automating security frameworks into functional, secure infrastructure while deploying security toolsets with automation as a principle. - Design and perform targeted security assessments, both automated and manual, against cloud workloads. - Integrate DevSecOps practices to automate static and dynamic API security evaluations using CI/CD tools; enforce governance checkpoints throughout key lifecycle phases (e.g., Design, Validate, Publish). - Collaborate with application, security, and platform teams to enforce security in API design, development, and deployment processes. - Contribute to reviews of security architecture, threat modeling, and technical design discussions. - Define, configure, and enforce API gateway policies for authentication, authorization, encryption, and traffic management controls. - Monitor network traffic and work with security and engineering teams during incident response and remediation efforts. - Advocate for a technologists perspective when selecting tools and solutions. - Demonstrate capability to build relationships and influence team members in a matrix-managed environment. - Present and summarize cybersecurity findings, risk status, and control effectiveness to leadership, translating complex security data into actionable insights for informed decision-making. - Document the technical solutions developed alongside the supporting processes. - Identify and resolve root causes of issues, focusing on systemic solutions rather than individual occurrences. Engage proactively and comprehensively.