Job description
NovaShield Technologies is seeking a Senior Cybersecurity Engineer to join our security operations and cloud security team. This role offers the opportunity to design, implement, and defend scalable security controls across our product stack. You will work across engineering, product, and incident response to reduce risk and enable rapid, secure delivery.
What you will do is partner with cross-functional teams to build resilient security architectures, lead incident response efforts, and ensure compliance with regulatory and risk requirements. You will influence product direction, automate security processes, and mentor junior engineers to raise the overall security posture of the organization.
Responsibility
- Lead the design and implementation of end-to-end security controls across cloud and on-prem environments
- Own incident response playbooks and coordinate remediation during security events
- Perform threat modeling, risk assessments, and vulnerability management programs
- Develop automation for security testing, monitoring, and remediation using Python, Bash, or PowerShell
- Collaborate with DevOps and engineering teams to shift security left in the development lifecycle
- Manage SIEM, EDR, IAM, and DLP tooling to detect and respond to threats
- Coordinate penetration testing and red team exercises with internal and external partners
- Provide mentorship and guidance to junior security engineers and foster a security-first culture
Qualification
- Bachelor's degree in computer science, cybersecurity, or a related field
- Minimum 5 years of hands-on cybersecurity experience in enterprise environments
- Strong experience with cloud security (AWS or Azure) and zero trust concepts
- Proven incident response and forensics capabilities
- Proficiency with security tooling: SIEM (Splunk, QRadar), EDR, DLP, IAM, vulnerability scanners
- Scripting and automation skills in Python, Bash, or PowerShell
- Relevant certifications such as CISSP, CISM, or CEH
- Excellent communication skills and ability to translate technical risk to non-technical stakeholders