Cybersecurity Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Clario

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1973

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 Private Equity Round on 2019-10

Healthcare • Consulting • Logistics

Clario is a company specializing in accelerating clinical trials from initiation to implementation through advanced technologies and services. Since 2018, Clario has revolutionized endpoint analyses in clinical trials by integrating over 30 artificial intelligence-enabled solutions across more than 600 active trials, enhancing data quality and patient privacy while expediting data collection processes. Clario provides a comprehensive clinical trial management platform, offering solutions such as eCOA, cardiac safety, medical imaging, precision motion, and respiratory services in various therapeutic areas including oncology, cardiology, and neurology. Known for its global reach, Clario supports clinical trials in over 100 countries with a strong focus on decentralized and hybrid trial models. The company's commitment to patient safety and innovation is reflected in their over 26,000 trials and involvement in numerous new drug approvals.

📋 Description

• Conduct comprehensive penetration testing of web applications, APIs, cloud environments, and supporting infrastructure. • Lead threat modeling exercises for new and existing products. • Perform secure design and architecture reviews. • Evaluate application, cloud, and infrastructure security controls and provide actionable recommendations. • Work with development teams to prioritize, track, and remediate security findings. • Integrate security testing and validation into CI/CD pipelines. • Develop and maintain security tooling, scripts, and automation capabilities. • Embed security requirements into product planning, design, development, and deployment processes. • Support vulnerability management, including validation, risk assessment, remediation guidance, and verification of fixes. • Contribute to security standards, secure development guidelines, and product security processes. • Monitor emerging threats, attack techniques, vulnerabilities, and security technologies. • Provide technical guidance and mentorship to engineering teams. • Assist with security audits, compliance initiatives, and evidence collection. • Drive continuous improvement of Product Security and DevSecOps programs.

🎯 Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or a related technical discipline, or equivalent practical experience. • 5+ years of experience in Cybersecurity, Application Security, Product Security, Security Engineering, or a related field. • Experience performing manual and automated penetration testing of web applications, APIs, cloud environments, and supporting infrastructure. • Experience conducting threat modeling and security architecture reviews using STRIDE, PASTA, ATT&CK, or equivalent frameworks. • Understanding of secure software development practices, common attack techniques, OWASP Top 10, and API Security Top 10. • Experience identifying, validating, and communicating security risks to technical and non-technical stakeholders. • Proficiency in one or more of Python, Java, JavaScript, C#, PowerShell, Go, or similar languages. • Experience in Agile development environments and integrating security practices into the SDLC. • Understanding of DevSecOps principles and integrating security tools into CI/CD pipelines. • Analytical, problem-solving, communication, and collaboration skills. • Ability to independently drive security initiatives while partnering with Engineering, Product, Architecture, and Operations teams. • Experience with cloud security assessments in AWS, Azure, or Google Cloud Platform. • Experience with microservices, APIs, containers, Kubernetes, and serverless technologies. • Familiarity with SAST, DAST, SCA, Container Security, and Infrastructure-as-Code security tools. • Experience developing security automation, custom security tooling, or pipeline integrations. • Knowledge of secure architecture patterns, identity and access management, cryptography, and zero-trust security concepts. • Experience supporting regulatory, compliance, or audit requirements in highly regulated industries. • Security certifications such as OSCP, OSWE, GWAPT, GWEB, CISSP, CCSP, or Azure, AWS, or GCP Security Certifications. • Willingness to work in European Shift (1pm to 10pm).

🏖️ Benefits

• Competitive compensation • Provident fund • Medical insurance • Engaging employee programs and local events • Modern office spaces and remote work flexibility