Information & Cybersec Lead

About the role

The Security by Design Engineer will be responsible for embedding security into the application design and architecture lifecycle. The role will lead secure design reviews, threat modeling, architecture risk assessments, and security consulting to help teams identify and address security risks early in the SDLC.

What you'll do

• Perform architecture and design security reviews for new applications, major changes, and technology implementations
• Review architecture diagrams, data flows, trust boundaries, integration points, deployment models, and privileged components
• Conduct threat modeling exercises using structured approaches such as STRIDE and document applicable threats and mitigations
• Evaluate security controls for authentication, authorization, input validation, data protection, encryption, session management, logging, and error handling
• Provide security recommendations for web applications, APIs, cloud-native workloads, SaaS/COTS integrations, and third-party connectivity

What you need

• 6–10 yrs of experience
• IAM
• OWASP
• Cloud security
• Risk management
• Any graduate

Good to have

• CISSP
• AWS
• GCP
• Azure