Application Security Engineering Advisor

3Ci is looking for a Senior Cybersecurity Engineer who will contribute to the security of critical infrastructure across our Client's expansive geographic footprint. As a Senior Cybersecurity Engineer, you will play a pivotal role in ensuring the security of their organization's software applications, collaborating with multi-functional teams to mitigate potential risks and enhance our overall security posture. Our Client in the Utilities Industry offers a dynamic work environment where employees are encouraged to shape their career paths and pursue continuous growth. As part of our team, you'll have access to training, workshops, and certification opportunities from day one. Be part of the changes driving the future of engineering, with a diverse portfolio, agile practices, and a mission-driven approach.

Shift Information

• Primarily remote, 1 day in office (Wednesdays)

Required Education and Experience

• 7+ years of experience in IT, Information Security, Software Development, or Cybersecurity

• 4+ years of experience specifically in Cybersecurity

• Expertise in application security, including security assessments, code reviews, and implementing controls

• Experience with cloud security principles and platforms (AWS, Azure, GCP)

General Requirements

• Strong understanding of secure software development practices and industry standards

• Proficiency in programming/scripting languages (JavaScript, Java, Python, PowerShell, Bash, C#)

• Excellent communication and collaboration skills

• Familiarity with secure coding standards and container technologies

• Bachelor's degree in Computer Science, Information Technology, or related field

• Relevant certifications (CISSP, CEH, CISM, CSSLP, CASE, CASP+, OSCP, GWEB, etc.)

• In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

Essential Functions

• Perform security assessments and vulnerability scans

• Implement security controls to protect sensitive data

• Conduct code reviews and provide remediation strategies

• Integrate security best practices into the software development lifecycle

• Design and implement authentication, authorization, and encryption mechanisms

• Collaborate with cross-functional teams to define security requirements

• Provide security guidance and training to development teams

• Investigate and respond to security incidents

• Stay updated on cybersecurity threats and technologies

• Participate in security architecture reviews

• Perform other tasks as required