Application Security Architect

About NCR

NCR Corporation (NYSE: NCR) is a leader in transforming, connecting and running technology platforms for self-directed banking, stores and restaurants. NCR is headquartered in Atlanta, Ga., with 38,000 employees globally. NCR is a trademark of NCR Corporation in the United States and other countries.

Application Security Architect

Position Location: Hyderabad, India

**Responsibilities**:

- Work as the lead to design, implement and govern the overall security architecture of NCR products.
- Aligning the secure development lifecycle to industry standards, including Microsoft SDL, OWASP development guides, and Privacy/PII related topics (privacy-by-design).
- Integrate/enable security engineering automation (e.g. SAST, IAST) in the delivery pipeline.
- Perform proof-of-concept and proof-of-technology testing for integrating new 3rd party security products into the development and deployment processes.
- Lead threat modeling, design reviews, and code reviews as part of the development lifecycle.
- Lead the implementation of proposed solutions while interfacing with the Project Management Office (PMO) to ensure the coordination, communication and successful delivery of projects.
- Develop and maintain security procedures and guidelines for NCR products.
- Manage relationships and interactions with human resources, legal, customers, and internal audit departments.

Required Skills and Experience
- Bachelor’s Degree in Computer Science or related field. Equivalent work experience will be considered.
- Software development background of 4 -7 years.
- Fluency in Java and.Net
- Pipeline/CI/CD/automation experience
- Experience with various cloud providers (GCP/Azure)
- Container experience (Docker, Kubernetes)
- Experience with PCI, PA-DSS, and other audits (e.g. FFIEC, SOX)
- Experience with privacy requirements of a global corporation (e.g. GDPR, CCPA)
- Soft skills - effective communication (internal, customer, legal counsel), collaboration (internal, external) and effective written skills (white papers, vulnerability specifications etc.).

Preferred Skills and Experience:

- Security certifications, e.g. CISSP, CSSLP, CEH
- Privacy training and certification, e.g. CIPT
- Experience with retail, financial, and/or hospitality software, particularly the types of vulnerabilities and security testing associated with them.
- Active participation in cybersecurity forums/conferences, e.g. DEFCON, Black Hat.

Hybrid, #LI_VY1

Offers of employment are conditional upon passage of screening criteria applicable to the job.

EEO Statement

Integrated into our shared values is NCR's commitment to diversity and equal employment opportunity. All qualified applicants will receive consideration for employment without regard to sex, age, race, color, creed, religion, national origin, disability, sexual orientation, gender identity, veteran status, military service, genetic information, or any other characteristic or conduct protected by law. NCR is committed to being a globally inclusive company where all people are treated fairly, recognized for their individuality, promoted based on performance and encouraged to strive to reach their full potential. We believe in understanding and respecting differences among all people. Every individual at NCR has an ongoing responsibility to respect and support a globally diverse environment.

Statement to Third Party Agencies

To ALL recruitment agencies: NCR only accepts resumes from agencies on the NCR preferred supplier list. Please do not forward resumes to our applicant tracking system, NCR employees, or any NCR facility. NCR is not responsible for any fees or charges associated with unsolicited resumes.