Cyber Security Engineer

BCforward; Phoenix (AZ); On-site; USD 92,000 - 103,000; Full time

Job summary

BCforward is seeking a highly motivated Cyber Security Engineer to join our team in Phoenix. Local candidates are preferred for this long-term engagement.

The role focuses on Oracle Cloud security, data protection, and security monitoring with expertise in Python scripting and IaC (Terraform). You will collaborate with cross‑functional teams to strengthen IAM, encryption, and secure SDLC practices.

Qualifications

• Bachelor’s degree in computer science, Information Security, Information Systems, or a related field.
• 3–8+ years of experience in information security, cybersecurity, governance, risk, compliance (GRC), or ERP security.
• Experience with security assessments of SaaS platforms, preferred Finance, Supply Chain, and Oracle HCM.

Responsibilities

• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Assess GCP Storage buckets and other databases including BigQuery for security.
• Review architecture, integrations, APIs, and data flows to identify security risks.
• Evaluate sensitive data handling including PII, financial, payroll, and supplier info.
• Evaluate IAM, RBAC, SoD, and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and applications teams.
• Review encryption standards for data at rest and in transit.
• Assess third‑party vendors and cloud solutions for security/compliance.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.

Skills

Oracle Cloud

GCP security

Python

Terraform

IAM

RBAC

SoD

Encryption

Data security

Secure SDLC

Cloud security

Education

Bachelor’s degree in CS/IS

Tools

Terraform

Job description

BCforward is seeking a highly motivated and experienced Cyber Security Engineer

Note: Candidate must be local to Phoenix, Arizona.

Job Title: Cyber Security Engineer

Duration: Long-term

Job Location: Phoenix, Arizona

Pay Rate: $67 W2 and $75 CTC

Must haves:

The ideal candidate must have hands‑on experience with Oracle Cloud security; Sumit mentioned that GCP experience is a secondary preference if Oracle‑specific candidates are unavailable.

A top priority for this role is database activity monitoring, specifically ensuring logs are centralized and alerts are appropriately scheduled.

Candidates should have expertise in data security controls, including encryption and key management, although Sumit noted he already has an SME focused on those areas.

Technical requirements include scripting knowledge, specifically Python, and experience with Infrastructure as Code (IaC) tools like Terraform.

Key Responsibilities

• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Conduct data security assessments of GCP Storage buckets and other other databases including bigquery.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
• Review encryption standards for data at rest and in transit.
• Assess third‑party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.

Required Qualifications

• Bachelor’s degree in computer science, Information Security, Information Systems, or a related field.
• 3–8+ years of experience in information security, cybersecurity, governance, risk, compliance (GRC), or ERP security.
• Experience with security assessments of SaaS platforms, preferred- Finance, Supply Chain, and Oracle HCM.

Strong understanding of:

• Identity and Access Management (IAM)
• Data classification
• Encryption technologies
• Authentication and authorization
• Secure SDLC
• Cloud security principles

Preferred Skills

• Experience conducting security architecture or application security reviews.
• Understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Hands‑on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, and communication skills.
• Ability to work effectively with cross‑functional business and technical teams.