Job Title: Senior Cybersecurity Specialist (Advisory)
Contract Duration: 6 months, possible extension
Location: St. Paul, MN
Work Arrangement: Onsite
Pay Range: $75-$80/hour
Summary
As a Senior Cybersecurity Specialist (Advisory) within the Product Cybersecurity team, you will play a critical role in supporting cybersecurity throughout the product development and operational lifecycle. You’ll collaborate closely with teams developing and maintaining mobile-enabled and cloud-based products, ensuring security is embedded from concept to deployment.
You will serve as a trusted advisor to product development teams, offering cybersecurity guidance that balances business objectives with risk mitigation. Product Owners, Engineers, and Managers will rely on your expertise and clear communication to make informed decisions.
Responsibilities
- Conduct threat modeling during the development of client products.
- Advise on cybersecurity risks associated with mobile and cloud-based product development.
- Ensure development teams align with industry cybersecurity standards and requirements.
- Analyze cybersecurity testing results to assess product security posture.
- Guide teams in prioritizing and remediating identified security vulnerabilities.
- Communicate significant product security concerns to leadership as needed.
Required Skills
- 5+ years in a technical advisory role within cybersecurity or as a product engineer with a cybersecurity focus.
- Professional experience in one or more of the following areas:
- Cloud-native application architecture and security design
- Mobile application architecture and security design
- Cloud computing architecture and security design
- Experience conducting cyber threat modeling using frameworks such as STRIDE or PASTA.
- Adept at aligning security best practices with continuous integration and delivery frameworks
- Strong grasp of information security principles and defense-in-depth strategies.
- Proven ability to influence without authority and build strong cross-functional relationships.
- Ability to balance business risk and cybersecurity risk.
- Excellent verbal and written communication skills tailored to both technical and non-technical audiences.
- Demonstrated problem-solving skills and adaptability in dynamic environments.
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.
- Familiarity with medical device cybersecurity frameworks is preferred.