Senior Cyber Security App Engineer: Cloud & On-Prem

Colliers International EMEA; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Colliers is seeking a security-focused professional to ensure security across cloud, on-prem, and SaaS applications. You will review, design, and implement controls, governance, and secure development practices to protect information assets throughout the product lifecycle.

The role demands 5–8+ years in cloud security or cybersecurity, experience with threat modeling, security reviews, and OWASP-focused testing oversight.

Qualifications

• 5-8+ years in cloud applications, cybersecurity, or related domains.
• Experience with threat modeling and security reviews across cloud and on-prem apps.
• Hands-on experience with whitebox, greybox, and blackbox assessments or overseeing app pen tests focused on OWASP.
• Strong documentation, cross-team collaboration, and ability to translate technical risks into business outcomes.
• Preferred certifications: CISSP, CCSP or equivalent; expert knowledge of zero trust, identity, threat detection, and security practices.

Responsibilities

• Perform security reviews of new and existing applications (cloud and on-prem) to ensure alignment with security baselines.
• Support architecture with threat modeling and implement security controls to address identified risks.
• Embed security into all phases of the product lifecycle from discovery to post-release monitoring.
• Lead or oversee application penetration testing and vulnerability analysis across environments.
• Define and maintain security requirements, baselines, and secure development lifecycle processes.

Skills

Cloud security

Threat modeling

Security reviews

Penetration testing oversight

Documentation

Cross-team collaboration

Risk translation to business

OWASP awareness

Education

CISSP

CCSP

Job description

Colliers is seeking a security-focused professional to ensure security across cloud, on-prem, and SaaS applications. You will review, design, and implement controls, governance, and secure development practices to protect information assets throughout the product lifecycle.

The role demands 5–8+ years in cloud security or cybersecurity, experience with threat modeling, security reviews, and OWASP-focused testing oversight.