Strategic Software Security Engineer

We are seeking a visionary Cybersecurity Solutions Architect to join our organization. This crucial role will transform how applications, software, and code are protected, significantly increasing cyber threat resiliency.

• Transform the way applications, software, and code are protected to increase cyber threat resiliency.

The ideal candidate will be a technical influencer, leveraging a data and risk-based approach to drive enterprise initiatives and build cross-functional partnerships to deliver modern security solutions.

Key responsibilities include:

• Use a data and risk-based approach to drive enterprise initiatives, formulate requirements, patterns, and solutions for risk mitigation.
• Act as a technical influencer and build cross-functional partnerships to deliver modern security engineering and operational solutions.
• Partner with the software engineering organization to design software security solutions, participate in proof of concepts, and enable secure, operational delivery.
• Own the software security program and initiatives, reporting on progress to leadership and stakeholders.
• Support the transformation of security engineering into early phases of enterprise delivery through Secure SDLC, Source code management, application security, and DevSecOps.
• Bring an everything-as-code security mindset to applications, APIs, and platform engineering.
• Define technical and business risks along with enterprise requirements for shared-responsibility engineering and operational controls.
• Be a transformation agent by advocating for modern secure engineering principles and automation.
• Mature and modernize the enterprise software security program, using a data-driven approach to identify risks, publish metrics and KPIs, and set enterprise requirements based on cybersecurity frameworks (NIST, Hitrust, CSF, SafeCode, OWASP).
• Contribute to enterprise security policies and standards, and evolve Secure SDLC standards and processes.
• Define, own, and drive the company's software security strategy and roadmap.
• Partner with software and platform engineering teams to promote DevSecOps solutions, establish secure code management practices, improve automated CI/CD pipelines with security services, and automate enterprise security requirements into backlogs.
• Champion cloud application and platform security engineering practices and deliver enterprise security patterns for software engineering.
• Educate and drive engagement of modern secure software principles within the organization.
• Perform design reviews to identify security architecture flaws.

Required Skills & Qualifications:

• Experience in software security or related roles.
• Proven track record building and transforming secure software and platform engineering practices.
• Experience building roadmaps and creating initiatives to address enterprise goals.
• Experience partnering with engineering teams to achieve security goals.
• Strong familiarity with source code management and software exploitation techniques (Mitre ATT&CK framework).
• Strong knowledge of cloud platform security (AWS, Azure, Oracle Infrastructure Cloud).
• Strong engineering mindset with software engineering experience.
• Experience implementing pipeline automation and source code management.
• Excellent oral and written communication skills, and effective organizational abilities.
• Additional Standout Skills:
• Hands-on experience with modern engineering technologies such as Kubernetes and Containers.
• Experience with securing Terraform or other IaC (Infrastructure as Code) platforms.
• Delivered secure coding practices to large engineering teams.
• Familiar with API Security.
• Enabling DevSecOps within large organizations.

Education & Certifications Preferred:

• Security Architecture TOGAF/SABSA certification.
• Cloud security certifications for OCI, AWS, or Azure (Azure preferred).