Senior Software Cybersecurity Engineer, Motorola Solutions

• Experience & Education: 7+ years in Security/Application Engineering; Bachelor’s degree in Computer Science, Information Security, or a related field
• Leadership: Proven track record in leading process change, mentoring on secure-by-design principles, and driving continuous improvement
• Cloud & Container Security: Strong knowledge of orchestration (AWS, Azure, GCP, Docker, Kubernetes) and container image vulnerability lifecycles
• AppSec & DevSecOps: Deep understanding of threat modeling (STRIDE, PASTA), IAM, cryptography, web/network protocols (HTTP, REST, TLS, TCP/IP), and integrating security tooling (SCA, SAST, DAST) into CI/CD pipelines
• Software Engineering: Hands-on development experience, specifically in Go and C#
• Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides)

Desirable

• The Senior Software Cybersecurity Engineer will analyze software designs and implementations to identify and remediate security vulnerabilities across the SDLC
• Security Design and Implementation:
• Perform threat modeling, risk assessments, audits, and architecture reviews, focusing on Cloud and container environments
• Manage Key Management and IAM controls
• Support engineering teams by defining security requirements to meet compliance standards and industry best practices
• Perform security code reviews and act as a technical SME for engineering and compliance teams
• Security Testing & DevSecOps:
• Deploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines
• Apply manual network/application testing, custom scripting, and unit test cases to validate controls
• Recommend improvements to existing security tools, processes, and secure coding standards
• Vulnerability Management:
• Drive vulnerability management with a focus on Kubernetes (K8s) and container images
• Triage, validate (including writing PoCs), and prioritize scanning tool findings
• Communicate security issues to stakeholders and manage remediation throughout the SDLC
• Incident Response and Compliance:
• Support product security incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks
• Apply Detection Engineering principles, setting baseline app security parameters and maintaining IDS/IPS rules
• Conduct post-incident analysis and lessons learned to refine response strategies
• Monitor emerging threats to proactively integrate new protections and ensure compliance with standards (OWASP, NIST)