Staff Security Engineer

Delinea is a cybersecurity company focused on securing human and machine identities through its Identity Security Platform. The Staff Security Engineer will provide technical leadership for the Product Security Program, performing security architecture reviews, threat modeling, secure design assessments, and security consulting. The role will also develop security standards, automate security operations, respond to incidents, and partner with engineering teams to integrate cloud and product security best practices.

Responsibilities:

• Provide strong leadership and be a security thought leader across Delinea’s product offerings
• Gain an understanding of current product security program state and partner with the team to define future state and multi-year roadmaps
• Promote strategic direction and influence security architecture adoption in product strategy and roadmap
• Use knowledge of current product security best practices and industry trends to advise on the secure design of Delinea products and services
• Perform end-to-end security architecture reviews and leverage AI capabilities to augment the team’s capabilities and coverage
• Perform Threat Modelling, assess and document product risks and/or application designs
• Participate in expanding/maturing Delinea’s S-SDLC program
• Stay up to date on the threat landscape, current technologies, security compliance requirements, standards and industry trends in order to help achieve cybersecurity’s goals
• Work on key areas to develop baseline cloud, container, application, and infrastructure security standards and integrate into the CI/CD pipeline
• Automate operational activities that are part of maintaining product and cloud security infrastructure
• Respond to and, when appropriate, resolve or escalate security incidents
• Provide mentorship and guidance to Product Security team members

Requirements:

• Bachelor's degree in Computer Science, Information Security, similar related field, or equivalent experience
• Twelve (12) years of professional work experience in Cybersecurity with a minimum of seven years in a Product Security role that includes Security Architecture, Threat Modeling, Secure Design, AppSec tooling, etc
• Well versed in current Product Security threat landscape and industry best practices
• Experience performing Threat Modeling and Product Security design reviews and incorporating them as part of SSDLC processes
• Cloud Security
• Cryptography
• Secure Design reviews and Threat Modeling
• SaaS multi-tenant product architecture
• REST APIs
• Containers (Docker, Kubernetes, or similar)
• Integration of Security testing tools into development pipelines
• Defect tracking (Jira, Bugzilla, ServiceNow, or similar)
• Source code management (ADO, GitLab, GitHub, or similar)
• Application security testing tools (SAST, DAST, IAST, SCA, or similar)
• Strong leadership, communication, and interpersonal skills, with the ability to influence stakeholders at all levels of the organization
• Strong analytical skills with the ability to prioritize, manage competing demands, and meet deadlines
• Strong communications skills both verbal & written with the ability to describe technical security issues in plain language
• Experience leveraging AI capabilities to automate and augment Product Security tasks such as Threat Modeling and, Secure Design reviews
• Strong understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR)
• Solid understanding of cloud security technologies including container security, serverless security, network and application security, and access management
• Software engineering and/or development experience
• Cybersecurity certifications (e.g., CISSP, CSSLP, CISM, or similar)
• Proficiency with Azure and AWS