[Hiring] Senior Cybersecurity Engineer @CodeRoad

Role Description

As a Senior Cybersecurity Engineer, you will serve as the technical backbone of our security organization, designing, implementing, and maintaining robust defense architectures across enterprise environments. You will take complete ownership of protecting complex cloud infrastructures, automated pipelines, and critical data assets against evolving threat vectors while driving zero-trust security principles across all engineering initiatives.

This role is critical to safeguarding digital assets, achieving rigorous compliance standards, and establishing a proactive security posture across multi-cloud environments. Operating as a core technical leader, you will bridge the gap between SecOps, IT, and software development teams to anchor threat mitigation, automate security orchestrations, and foster a security-first engineering culture.

Key Responsibilities

• Design and deploy end-to-end cloud and network security architectures across AWS, Azure, or GCP environments to enforce zero-trust policies.
• Build and maintain automated threat-detection mechanisms, SIEM/SOAR pipelines, and incident response runbooks to accelerate threat mitigation.
• Optimize security operations by conducting routine vulnerability assessments, penetration testing, and automated compliance auditing across active application stacks.
• Lead complex security incident investigations, performing root-cause analysis and deploying immediate remediation strategies.
• Collaborate with DevOps and engineering PODs to integrate DevSecOps practices, static/dynamic security testing (SAST/DAST), and dependency scanning directly into CI/CD pipelines.
• Anchor enterprise risk management frameworks and ensure compliance with global regulatory standards such as ISO 27001, SOC 2, and GDPR.

Qualifications

• 5+ years of hands-on experience in Security Operations, Threat Modeling, or Infrastructure Security Engineering.
• Deep technical expertise in cloud security (AWS, Azure, or GCP) and identity management architectures (IAM, OAuth2, SAML).
• Strong experience implementing and configuring enterprise SIEM/SOAR, XDR/EDR, and threat-intelligence platforms.
• Proficiency in scripting and automation using Python, Bash, or Go.
• Hands-on experience integrating security tooling (SAST/DAST/IAST) into modern CI/CD pipelines.
• Ownership mindset with a demonstrated ability to anchor critical security incidents under pressure.
• Strong collaboration skills and a track record of influencing engineering teams toward security best practices.
• Advanced English fluency (written and spoken) is mandatory.

Nice to Have

• Active industry security certifications (e.g., CISSP, CISM, CCSP, or CEH).
• Experience with Infrastructure as Code (IaC) security scanning tools (e.g., Terraform, Checkov, Trivy).
• Direct experience with container and orchestration security (Docker, Kubernetes, K3s).
• Familiarity with AI-driven threat detection models or automated security orchestration frameworks.

Benefits

• 100% Remote
• Holidays off
• Paid Time Off
• Health insurance assistance
• Competitive USD compensation
• Growth opportunities