Job Description
Job Title: Senior Cybersecurity Engineer
\n
Location: Mountain View, CA (Hybrid – 4 days onsite per week)
\n
Experience Level: 10+ Years
\n
Job Type: W2 Only (No C2C / No Third-Party)
\n
Visa: H4EAD, OPT, H1B, GC(Genuine), USC
\n
\n
\n
Job Overview
\n
:We are seeking a highly experienced Senior Cybersecurity Engineer to join our team in Mountain View, CA. This is a long-term W2 contract opportunity for a hands-on security expert who can design, build, and enhance secure systems in a fast-paced, product-driven environment
\n
.The ideal candidate brings deep technical expertise in application security, secure software development, cloud security, and threat mitigation, along with strong collaboration skills to work closely with engineering, DevOps, and infrastructure teams
\n
Key Responsibilities
\n
- \n
- :Design, develop, and implement secure architecture solutions across applications and cloud environments
- .Integrate security best practices into the SDLC (Secure SDLC)
- .Conduct threat modeling, risk assessments, and security design reviews
- .Perform code reviews and identify security vulnerabilities in applications (SAST/DAST)
- .Build and enhance security tools, automation frameworks, and detection mechanisms
- .Lead incident response efforts, root cause analysis, and remediation planning
- .Implement and manage security controls in cloud environments (AWS, GCP, or Azure)
- .Collaborate with DevOps teams to strengthen CI/CD pipeline security
- .Ensure compliance with industry standards such as OWASP, NIST, ISO 27001, SOC 2, etc
- .Mentor junior engineers and provide security guidance across teams
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Required Qualifications
\n
- \n
- :10+ years of experience in cybersecurity engineering or secure software development
- .Strong programming experience in languages such as Java, Python, Go, or C++
- .Deep understanding of application security, encryption, authentication, and authorization protocols (OAuth, SAML, JWT, etc.)
- .Experience with cloud security (AWS, GCP, or Azure) and container security (Docker, Kubernetes)
- .Hands-on experience with security tools such as Snyk, Checkmarx, Veracode, Burp Suite, or similar
- .Strong knowledge of network security, firewalls, IDS/IPS, SIEM tools
- .Experience with DevSecOps practices and CI/CD pipeline security integration
- .Proven ability to conduct threat modeling and vulnerability assessments
- .Excellent problem-solving and communication skills
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Preferred Qualifications
\n
- \n
- :Security certifications such as CISSP, CEH, CISM, or OSCP
- .Experience working in large-scale enterprise or product-based environments
- .Knowledge of Zero Trust architecture principles
- .Experience with compliance frameworks and audit processes
\n
\n
\n
\n
\n
\n
.