Cyber Security Analyst

• Define and maintain the organization’s security strategy, policies, standards, and architecture principles
• Act as a security advisor to engineering, product, and leadership teams, ensuring alignment with business and regulatory requirements
• Design and govern secure AWS architectures, including IAM, networking, and core AWS security services
• Continuously assess cloud environments and drive remediation of security risks and misconfigurations
• Lead application security reviews, threat modeling, and risk assessments for Java based backend services and Vue.js frontend applications
• Embed security into the SDLC through secure coding practices, CI/CD security controls, and vulnerability management
• Define and enforce data and database security controls, including encryption, access management, and auditing
• Support compliance, audits, DPAs, BCDR planning, vulnerability assessments, and penetration testing activities
• Lead incident response processes, security monitoring, and post-incident improvement initiatives
• Collaborate with engineering and DevOps teams to promote a security-by-design culture and provide practical security guidance

• Experience in cloud and application security, with hands-on AWS production environments
• Strong knowledge of Java (Spring/Spring Boot) and frontend security (Vue.js)
• Solid understanding of MySQL security and data protection
• Experience with risk assessment, vulnerability management, and incident response
• Working knowledge of DPAs, BCP/DR, VAPT, and bug bounty programs
• Relevant security or cloud certifications such as AWS Security Specialty, CISSP, CISM, or similar
• Experience with containerized workloads and Kubernetes security
• Familiarity with modern authentication and authorization approaches such as OAuth2 and OpenID Connect
• Experience working in agile or Descopes environments

Competitive compensation, benefits, and opportunities for growth