Security Engineer – Architect

Role Overview

• Help develop and maintain a comprehensive application security architecture for our products that aligns with our business goals and technology landscape.
• Design and implement security solutions that leverage the latest technologies and best practices for application security.
• Translate business objectives and risk management strategies into actionable security processes for our products.
• Establish and enforce security configuration standards for application development, deployment, and maintenance.
• Develop standards for data encryption and tokenization to safeguard sensitive information within our products.
• Stay ahead of emerging threats and technologies to ensure our product security posture remains robust and adaptive.
• Lead the full migration of our application stack from AWS and legacy data centers to Azure, ensuring a seamless transition and robust security posture for our applications in the new environment.
• Spearhead the rebuilding of our product security program to enhance our defenses and align with industry best practices.
• Partner in the implementation of a comprehensive security architecture program that supports our strategic goals and operational needs for product security.
• Drive application team leaders to accept and comply with the Application Security SDLC processes.
• Work closely with product managers, developers, and other stakeholders to integrate security into all aspects of our product lifecycle.
• Assess and manage the security of third-party vendors and partners involved in product development.
• Liaise with other security professionals to share insights and best practices.
• Collaborate with the business continuity team to ensure security measures are in place during failovers and other critical events affecting our products.

Requirements

• Bachelor's or master's degree in computer science, information systems, cybersecurity, or a related field, or comparable experience.
• CISSP, CSSLP, CISA, TOGAF, GAIC, or CISM preferred.
• Hands-on experience with application security, threat modeling, secure coding practices, and vulnerability management.
• Hands on practice with AI model development and securing the DevOps infrastructure.
• Familiarity with regulations and frameworks such as HIPAA, GDPR, ISO 27001/2, and NIST CSF.
• Strong strategic planning, communication, financial analysis, and project management skills.

Tech Stack

• AWS
• Azure
• Cyber Security
• SDLC

Benefits

• health coverage
• wellbeing programs
• paid leave (vacation, sick, parental)
• retirement plans
• learning opportunities