Lead Cyber Security Engineer

Highbrow Technology Inc; New Jersey; On-site; USD 120,000 - 180,000; Full time

Job summary

Highbrow Technology Inc is seeking an experienced Cyber Security Team Lead to drive secure development and security engineering across products. You will lead threat modeling, SSDLC, risk assessments, and security testing, while collaborating with engineering, architecture, and PM teams to embed security into delivery.

You will oversee regulatory compliance efforts (GDPR, CPRA, SOX, PCI-DSS), manage security controls, and mentor developers in secure coding practices in a fast-paced Agile

Qualifications

• Bachelor's degree in a related field.
• 5+ years hands-on cybersecurity engineering experience.
• Experience in SSDLC and security testing.

Responsibilities

• Implement and maintain cybersecurity controls across products.
• Collaborate with security, architecture, software, and project teams on secure solutions.
• Ensure compliance with security frameworks and standards.
• Translate security requirements into development roadmaps.
• Perform security assessments including code reviews and pen testing.
• Conduct threat modeling and vulnerability analysis.
• Recommend mitigation strategies for identified risks.
• Enforce GDPR, CPRA, SOX, PCI-DSS requirements.
• Investigate and respond to security incidents and requests.
• Monitor emerging threats and attack techniques.
• Deliver secure coding awareness and training to developers.
• Support continuous improvement of security governance.

Skills

Threat modeling

Vulnerability management

SSDLC

Penetration testing

Code review

Static analysis

Dynamic analysis

Cloud security

Regulatory compliance

Agile/Scrum

Stakeholder comms

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field

Tools

Qualys

SonarQube

Detectify

GitHub Advanced Security

Job description

We are looking for an experienced Cyber Security Team Lead with strong hands-on experience in Cybersecurity Engineering, Application Security, SSDLC, threat modeling, vulnerability management, and security assessments.

Day to Day Job Duties: (what this person will do on a daily/weekly basis)

• Implement and maintain cybersecurity controls and secure development practices across digital products and platforms.
• Collaborate with Information Security, Enterprise Architects, Software Engineers, and Project Managers on the design and delivery of secure solutions.
• Ensure compliance with enterprise security architecture, governance frameworks, and industry security standards.
• Translate cybersecurity and privacy requirements into actionable product development roadmaps.
• Perform technical security assessments, including code reviews, static and dynamic application security testing, and penetration testing.
• Conduct threat modeling, vulnerability assessments, and cyber risk analysis activities.
• Recommend and implement mitigation strategies to reduce identified security risks.
• Enforce information security and data privacy requirements related to regulations such as GDPR, CPRA, SOX, and PCI-DSS.
• Investigate, resolve, and escalation security incidents and support requests as required.
• Monitor emerging cybersecurity threats, vulnerabilities, and attack methodologies.
• Deliver secure coding awareness and cybersecurity training sessions to development teams.
• Support continuous improvement initiatives related to application security and cybersecurity governance.

Basic Qualifications: (what are the skills required to this job with minimum years of experience on each)

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Minimum 5+ years of hands-on experience in Cybersecurity Engineering, Application Security, or Information Security.
• At least 5+ years of experience implementing security controls and secure software development lifecycle (SSDLC) practices.
• Experience performing threat modeling, risk assessments, vulnerability management, and penetration testing.
• Experience conducting application security reviews, including static and dynamic code analysis.
• Hands-on experience with security tools such as Qualys, SonarQube, Detectify, GitHub Advanced Security, or equivalent solutions.
• Strong understanding of information security frameworks, methodologies, standards, and best practices.
• Experience securing cloud environments, web applications, APIs, and enterprise platforms.
• Experience implementing and maintaining regulatory compliance requirements including GDPR, CPRA, SOX, and PCI-DSS.
• Strong understanding of secure software engineering principles and common programming languages.
• Experience working in Agile/Scrum environments and collaborating with cross-functional teams.
• Strong analytical, troubleshooting, risk assessment, and problem-solving skills.
• Ability to communicate technical security concepts effectively to both technical and non-technical stakeholders.