Cyber Security Engineer II - Product Security (Hybrid)

Global Payments Inc.; Cincinnati (OH); Hybrid; USD 79,400 - 116,975; Full time

Job summary

Global Payments Inc. is seeking a Cyber Security Engineer II to join our Product Security team and help shape the future of global commerce.

You will work with engineering teams to explain vulnerabilities, recommend remediation, and promote secure software throughout the lifecycle. This hybrid role requires in-office presence 3 days per week in Atlanta, Cincinnati or Denver.

Candidates should have 5+ years in cyber security and experience with Java or .NET, DAST/SAST/SCA, and API/web security.

Qualifications

• US Citizenship or Green Card holder
• 5+ years of cyber security experience
• Experience in product security
• Experience with Java and/or .NET
• Experience using DAST, SAST and SCA tools
• Experience with securing APIs, web apps, and WAF
• Experience conducting Threat Modeling exercises using STRIDE

Responsibilities

• Explain detected vulnerabilities and recommend remediation options
• Promote secure software practices across the lifecycle
• Create reference implementations for security patterns (authentication, encryption)
• Collaborate with engineering teams to apply security requirements

Skills

Cyber security experience

Product security

Software security

Java

.NET

DAST/SAST/SCA

APIs/Web security

Threat modeling

Communication with engineering

PCI/industry standards

Education

Bachelor’s degree in computer engineering, computer science or related discipline

Job description

Global Payments Inc. is seeking a Cyber Security Engineer II to join our Product Security team and help shape the future of global commerce.

You will work with engineering teams to explain vulnerabilities, recommend remediation, and promote secure software throughout the lifecycle. This hybrid role requires in-office presence 3 days per week in Atlanta, Cincinnati or Denver.

Candidates should have 5+ years in cyber security and experience with Java or .NET, DAST/SAST/SCA, and API/web security.