Senior Software Security Engineer — Secure SDLC & Cloud

Stefanini, Inc; Dearborn, Northern (MI, KY); Hybrid; USD 8,403,000 - 9,092,000; Full time

Job summary

Stefanini Group is hiring a Software Security Engineer in Dearborn, MI. The role spans across software development, cybersecurity, cloud, DevOps, and IT.

You will translate security risks into actionable solutions and help remediation efforts while advancing secure software practices. Responsibilities include reviewing security plans, guiding triage and remediation of findings from SAST/DAST/SCA, and developing automation to identify vulnerabilities across Azure, AWS, and GCP environments.

Qualifications

• Experience in Software Security, cybersecurity, or secure software development.
• Experience with vulnerability remediation and secure coding practices.
• Ability to translate security risks into practical solutions and communicate to stakeholders.

Responsibilities

• Perform security plan reviews and secure code reviews for flagship services, products, and partner applications.
• Guide development teams in triaging and remediating findings from SAST, DAST, SCA, bug bounty programs, and vulnerability assessments.
• Develop automation scripts and tools to help identify and remediate security vulnerabilities.
• Serve as a security advocate within development teams and promote secure software development practices.
• Collaborate with software architects, developers, and DevOps teams to integrate security throughout the SDLC and CI/CD pipelines.
• Provide guidance on secure architecture, API security, IAM, logging, encryption, data protection, and secure coding practices across Azure, GCP, and AWS environments.
• Define and maintain security best practices based on current threats and vulnerabilities.
• Ensure access controls, data encryption, and data anonymization requirements are followed.
• Partner with incident response teams during security incidents and incorporate lessons learned into product and system hardening.
• Work with engineering teams to ensure security vulnerabilities are addressed within established SLAs.
• Support software supply-chain security, SBOM requirements, technical debt, and upgrade planning.
• Maintain security requirements, test plans, and other cybersecurity documentation.
• Support cybersecurity compliance activities, risk assessments, and related security requirements.
• Communicate complex technical risks clearly to both technical and business stakeholders.

Skills

Cybersecurity

Secure SDLC

Scripting & automation

Web technologies

Networking basics

SDLC

Troubleshooting

Data integrity

Vulnerability remediation

DevOps collaboration

Two languages or one advanced

Communication & analytics

Education

Bachelor's degree

Master's degree

Tools

Java

JavaScript

Python

Spring Security

Spring Boot

Linux

React

REST/API security

IAM

Azure

GCP

AWS

Burp Suite

Dynatrace

Salesforce

Pega

Apache Tomcat

Job description

Stefanini Group is hiring a Software Security Engineer in Dearborn, MI. The role spans across software development, cybersecurity, cloud, DevOps, and IT.

You will translate security risks into actionable solutions and help remediation efforts while advancing secure software practices. Responsibilities include reviewing security plans, guiding triage and remediation of findings from SAST/DAST/SCA, and developing automation to identify vulnerabilities across Azure, AWS, and GCP environments.