Job description

Confiz is seeking a Senior Security Engineer to support one of our largest retail clients. This contract opportunity is ideal for a cybersecurity professional with deep expertise in application security, secure software development, and AI-driven security automation. In this role, you will partner with engineering, product, and security teams to assess internally developed and third-party applications, identify security risks, and implement scalable solutions that strengthen the organization's security posture. A key focus will be leveraging AI to automate security assessments, compliance validation, threat modeling, and policy enforcement, helping accelerate security initiatives while driving innovation across the enterprise. Work Schedule: 9:00 am - 6:00 pm Pacific Time Zone Responsibilities • Conduct security assessments of internally developed and third-party applications across the enterprise. • Collaborate with engineering, product, and vendor teams to understand application architecture and identify potential security risks. • Develop and maintain standardized assessment frameworks and methodologies tailored to various application types and deployment models. • Develop AI tools and techniques to automate and streamline security assessments, including compliance and policy enforcement, threat modeling, and supply chain security evaluation. • Document findings and provide actionable recommendations to improve application security posture. • Track remediation efforts and validate fixes to ensure risk reduction. • Contribute to the development of secure design patterns and reusable security components. • Stay current with emerging threats, vulnerabilities, and AI-driven security innovations. • Goal is to develop AI automation, and work alongside FTEs to fast track security systems. Qualifications • Bachelor’s or master’s degree in computer science, cybersecurity, or a related field or equivalent experience required. • 8+ years of experience in cybersecurity, including hands-on assessment and remediation. • Strong understanding of secure software development practices, threat modeling, and vulnerability management. • Experience with security assessment tools and platforms, including AI-enhanced solutions. • Familiarity with cloud-native architectures, APIs, and modern development frameworks. • Excellent communication skills and ability to influence cross-functional teams. • Certifications such as CISSP, OSCP, or CSSLP are a plus. We have a global team of amazing individuals working on highly innovative enterprise projects & products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast growth fintech, and multiple Silicon Valley startups. What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM) and ISO 14001:2015 (EMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun. People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves. To know more about Confiz, visit: linkedin.com

Requirements

Must-haves

Work Schedule: 9:00 am - 6:00 pm Pacific Time Zone
Conduct security assessments of internally developed and third-party applications across the enterprise.
Collaborate with engineering, product, and vendor teams to understand application architecture and identify potential security risks.
Develop and maintain standardized assessment frameworks and methodologies tailored to various application types and deployment models.
Develop AI tools and techniques to automate and streamline security assessments, including compliance and policy enforcement, threat modeling, and supply chain security evaluation.
Document findings and provide actionable recommendations to improve application security posture.
Track remediation efforts and validate fixes to ensure risk reduction.
Contribute to the development of secure design patterns and reusable security components.
Stay current with emerging threats, vulnerabilities, and AI-driven security innovations.
Goal is to develop AI automation, and work alongside FTEs to fast track security systems.
Bachelor’s or master’s degree in computer science, cybersecurity, or a related field or equivalent experience required.
8+ years of experience in cybersecurity, including hands-on assessment and remediation.
Strong understanding of secure software development practices, threat modeling, and vulnerability management.
Experience with security assessment tools and platforms, including AI-enhanced solutions.
Familiarity with cloud-native architectures, APIs, and modern development frameworks.
Excellent communication skills and ability to influence cross-functional teams.
People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves.

Nice-to-haves

Certifications such as CISSP, OSCP, or CSSLP are a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: careers-html
Effort: medium