Minimum Qualifications

• 10+ years of experience in Product Security, Security Architecture, or Cloud Security.
• Strong expertise in secure application design, SaaS security, and API security.
• Experience securing cloud-native applications, serverless environments, and microservices architectures.
• Hands-on experience with CI/CD security, threat modeling, and security assessments.
• Deep understanding of OAuth, JWT, identity federation, and authentication security.
• Strong expertise in zero-trust security models, infrastructure security, and IAM security.
• Scripting and automation skills (Python, Terraform, PowerShell, or Go).
• Experience working with SIEM, SOAR, and security data lakes to enable security analytics.
• Familiarity with MITRE ATT&CK, adversary emulation, and detection engineering methodologies.

Preferred Qualifications

• Experience with securing AI/ML models, API security testing, and business logic security.
• Hands-on experience in container security, Kubernetes hardening, and service mesh security.
• Experience with WAF, RASP, API gateways, and cloud-native security tools.
• Knowledge of PKI, TLS security, and cryptographic security best practices.

Career Level - IC5