Subject Matter Expert - Cyber Security
First seen by Alion on Sep 18, 2026.
Job Description :
Role & Responsibilities :
- Provide cybersecurity expertise and guidance across products, platforms, cloud services, and software engineering initiatives.
- Drive Security-by-Design and Secure SDLC practices throughout the product lifecycle.
- Conduct threat modeling, security assessments, and security architecture/design reviews.
- Define and implement Application/Product Security standards and controls.
- Integrate security practices into DevSecOps and CI/CD pipelines using SAST, DAST and SCA.
- Assess and strengthen AWS/Azure cloud security and cloud-native environments.
- Guide container and Kubernetes security for modern application platforms.
- Review and secure APIs, microservices, authentication and authorization mechanisms.
- Collaborate with Architects, Engineering, DevOps, QA, Product Management and Cybersecurity teams to identify and mitigate security risks.
- Provide technical guidance on vulnerabilities, secure coding, remediation and security best practices.
- Support penetration testing, vulnerability assessments and security validation activities.
- Establish cybersecurity standards, controls and governance aligned with organizational and industry requirements.
Preferred Candidate Profile:
- 6 - 10 years of experience in Cybersecurity, Product Security, Application Security or Security Engineering.
- Strong hands-on experience in Application/Product Security and Secure SDLC.
- Proven experience with Threat Modeling, preferably STRIDE/PASTA.
- Strong understanding of Security Architecture and Security-by-Design.
- Hands-on experience with AWS and/or Azure Cloud Security.
- Strong knowledge of DevSecOps and CI/CD security integration.
- Experience with SAST, DAST and SCA tools and security gates.
- Good understanding of Docker, Kubernetes and Container Security.
- Strong knowledge of API and Microservices Security.
- Good understanding of OWASP Top 10 and common application security vulnerabilities.
- Strong analytical, problem-solving and communication skills with the ability to work independently as a technical SME.
- Security certifications such as CISSP, OSCP, CEH, CSSLP are an advantage.
Skills
DevSecOps, Cloud Security, Threat Modeling, AWS, Azure, CISSP, OSCP, SAST, DAST, Applications Security, Cyber Security