Sunovaa Tech - Subject Matter Expert - Cyber Security

: Role & Responsibilities : - Provide cybersecurity expertise and guidance across products, platforms, cloud services, and software engineering initiatives. - Drive Security-by-Design and Secure SDLC practices throughout the product lifecycle. - Conduct threat modeling, security assessments, and security architecture/design reviews. - Define and implement Application/Product Security standards and controls. - Integrate security practices into DevSecOps and CI/CD pipelines using SAST, DAST and SCA. - Assess and strengthen AWS/Azure cloud security and cloud-native environments. - Guide container and Kubernetes security for modern application platforms. - Review and secure APIs, microservices, authentication and authorization mechanisms. - Collaborate with Architects, Engineering, DevOps, QA, Product Management and Cybersecurity teams to identify and mitigate security risks. - Provide technical guidance on vulnerabilities, secure coding, remediation and security best practices. - Support penetration testing, vulnerability assessments and security validation activities. - Establish cybersecurity standards, controls and governance aligned with organizational and industry requirements. Preferred Candidate Profile: - 6 - 10 years of experience in Cybersecurity, Product Security, Application Security or Security Engineering. - Strong hands-on experience in Application/Product Security and Secure SDLC. - Proven experience with Threat Modeling, preferably STRIDE/PASTA. - Strong understanding of Security Architecture and Security-by-Design. - Hands-on experience with AWS and/or Azure Cloud Security. - Strong knowledge of DevSecOps and CI/CD security integration. - Experience with SAST, DAST and SCA tools and security gates. - Good understanding of Docker, Kubernetes and Container Security. - Strong knowledge of API and Microservices Security. - Good understanding of OWASP Top 10 and common application security vulnerabilities. - Strong analytical, problem-solving and communication skills with the ability to work independently as a technical SME. - Security certifications such as CISSP, OSCP, CEH, CSSLP are an advantage.