Senior Cloud Security Applications Engineer

Colliers International EMEA; United States; Remote; USD 48,000 - 79,000; Full time

Benefits offered by this job

Remote work in Poland

Private healthcare

Training program

International environment

English as working language

Job summary

Colliers International EMEA is seeking a Senior Cyber Security Applications Engineer to work with IT and business teams to ensure security across cloud and on‑prem apps, and to define security requirements for IaaS/PaaS and SaaS platforms.

You will conduct threat modelling, security reviews, and oversee vulnerability management while integrating secure development lifecycle practices with Governance, Risk and Compliance.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• 5–8+ years of experience in cloud applications, cybersecurity, or related domains.
• Strong experience performing threat modelling and security reviews.
• Hands-on experience in whitebox, greybox, and blackbox assessments or overseeing application pentests focusing on OWASP.

Responsibilities

• Perform deep architecture and security reviews on applications (cloud and on‑prem) to identify vulnerabilities.
• Design applications security requirements, performing threat modelling and managing applications pentests.
• Support decision-making by determining the tradeoffs between security and business requirements.
• Lead implementation of strategic security initiatives across Colliers.

Skills

Threat modelling

Security reviews

OWASP

Pentest oversight

Documentation

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

OWASP

Job description

Colliers International EMEA is seeking a Senior Cyber Security Applications Engineer to work with IT and business teams to ensure security across cloud and on‑prem apps, and to define security requirements for IaaS/PaaS and SaaS platforms.

You will conduct threat modelling, security reviews, and oversee vulnerability management while integrating secure development lifecycle practices with Governance, Risk and Compliance.