The Software Security Architect 4 plays a critical role in safeguarding the companys products and services by ensuring secure design rigorous testing and proactive vulnerability management. This position will work closely to promote secure coding practices and identify potential risks.
Responsibilities:
Define and implement education programs that ensure software and test engineers understand secure software development practices and how to identify insecure code. Regularly monitor the effectiveness of these programs and update as needed.
Review software designs and test plans on the companys software to ensure they meet established security standards.
Maintain threat models for all company products and services ensuring they are current and comprehensive.
Lead the definition and review of security controls in products and services to align with the latest threat models.
Develop review and maintain up-to-date documentation on all security controls used across company products and services.
Ensure that all tools used in the development of products are secure and meet industry standards.
Regularly review and validate the effectiveness of security verification tools ensuring they are consistently applied.
Foster and participate in a community of security best practices within the company promoting a culture of security.
Promptly assess and prioritize remediation for both internally and externally discovered vulnerabilities within the companys software.
Assess and prioritize remediation for vulnerabilities in third-party software used within company products coordinating fixes as needed.
Serve as the primary contact for security-related questions ensuring all employees know where to direct security inquiries.
Operate as a trusted advisor on issues and trends; provide general consulting services leveraging expertise and significant best practice knowledge.
Operate as an innovative thought leader; contribute significantly to the overall growth and quality of the department through knowledge sharing and coaching on current best practices and market trends.
Mentor coach train and provide feedback to other team members; provide feedback to leadership on abilities of team.
Minimum Qualifications:
Bachelors degree in Computer Science or related field
Minimum of 8 years of progressive security architecture experience; preferably within a professional services company or similar environment working with startups and large security mature companies
Minimum of 8 years of application security experience designing building or testing web and API-based architectures
3+ years of experience working with stakeholders across many functions
Understanding of security vulnerabilities attacker exploit techniques and methods for remediation of such
Capacity and tolerance for extreme context switching and interruptions while remaining productive and able to provide effective safe guidance
Experience communicating technical concepts to a non-technical audience
Prior working experience in or with a Software Development Team
Demonstrated experience in areas such as system security network and/or application security experience
Understanding of best practices in one or more security engineering specialties: secure development cryptography network security security operations systems security policy and incident response
Experience developing and interpreting security compliance standards and guidance
Scripting skills (eg Python C C++ Java Ruby or PowerShell)
Microsoft Windows and Office proficient
Excellent oral and written communications skills that demonstrate a professional demeanor and the ability to interact with executive presence
Excellent organizational multi-tasking and time management skills
Excellent collaboration skills applied successfully within team as we'll as with all levels of employees in other areas
Excellent Microsoft Excel skills
Excellent leadership sound judgement and business acumen skills
Excellent facilitation and project management skill
Excellent interpersonal skills; able to maintain solid rapport with team members as we'll as maintain professionalism with those outside of department
Excellent data gathering interviewing and analytical/problem solving skills
Excellent critical thinking and problem solving skills
Excellent ability to use original thinking to translate goals into the implementation of new ideas and design solutions
Self-motivated with the ability to manage projects to completion independently
Able to thrive in a fast paced deadline driven environment
Excellent attention to detail
Demonstrated ability to influence motivate and mobilize team members and business partners
Excellent ability to develop and use engaging informative and compelling presentation methodologies
Excellent ability to handle sensitive information with discretion and tact
Excellent ability to establish rapport and gain the trust of others; effective at gaining consensus
Ability to work independently and in a team environment
Ability to coach mentor and provide feedback to team members in a timely manner
Ability to provide guidance and support to developing team members
Up to 5% travel time required
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: Engineering - Software & QARole Category: Software DevelopmentRole: Software Development - OtherEmployement Type: Full time