Cybersecurity Solutions Architect

**Description**

Cybersecurity Solutions Architect

Syneos Health® is a leading fully integrated biopharmaceutical solutions organization built to accelerate customer success. We translate unique clinical, medical affairs and commercial insights into outcomes to address modern market realities.

Every day we perform better because of how we work together, as one team, each the best at what we do. We bring a wide range of talented experts together across a wide range of business-critical services that support our business. Every role within Corporate is vital to furthering our vision of Shortening the Distance from Lab to Life®.

Discover what our 29,000 employees, across 110 countries already know.

**WORK HERE MATTERS EVERYWHERE**

Why Syneos Health
- We are passionate about developing our people, through career development and progression; supportive and engaged line management; technical and therapeutic area training; peer recognition and total rewards program.
- We are committed to our Total Self culture - where you can authentically be yourself. Our Total Self culture is what unites us globally, and we are dedicated to taking care of our people.
- We are continuously building the company we all want to work for and our customers want to work with. Why? Because when we bring together diversity of thoughts, backgrounds, cultures, and perspectives - we’re able to create a place where everyone feels like they belong.

**Responsibilities**:
**JOB SUMMARY**

As an architect you will partner with the software engineering organization to design software security solutions, participate in proof of concepts and enable the engineering organization to deliver secure, operational solutions. The role will own the software security program and initiatives and be responsible for reporting on progress to leadership and stakeholders.

To be successful, the role will need to define and identify technical and business risks along with enterprise requirements that can be consumed by a shared-responsibility model for engineering and operational controls. Be a transformation agent by advocating for modern secure engineering principles and automation.

Excellent oral and written communication skills, as well as effective organizational abilities, are essential due to the detailed and time-bound nature of the work and the extensive collaboration with others.

**JOB RESPONSIBILITIES**
- Mature and modernize the enterprise software security program and initiatives to manage risks and enable technology solutions:

- Use a data-driven approach to identifying areas of risk
- Publish metrics and KPI’s
- Set enterprise requirements for secure software development based on common cyber security frameworks such as NIST, Hitrust, CSF. SafeCode, OWASP etc
- Contribute to enterprise security policies and standards.
- Evolve Secure SDLC standards and processes
- Define, own, and drive the company's software security strategy and roadmap, acting as the key security voice for software security
- Partner with software and platform engineering teams to:

- Promote DevSecOps solutions and culture
- Establish secure code management practices
- Improve automated CI/CD pipelines with appropriate security services
- Automate enterprise security requirements into backlogs
- Delivery enterprise security patterns for software engineering
- Participate in Proof of Concepts with the software engineering organization.
- Educate and drive engagement of modern secure software principles within the organization by:

- Being a strategic advisor in software security.
- Being a transformation agent in promoting a modern security engineering mindset.
- Performing design reviews to identify security architecture flaws.
**QUALIFICATION REQUIREMENTS**

What we are looking for:

- 5-7 years of experience in software security or related roles.
- Proven track record building and transforming secure software and platform engineering practices
- Building road maps and creating initiatives to address enterprise goals.
- Experience partnering with engineering teams to achieve security goals.
- Strong familiarity with source code management
- Strong knowledge of cloud platform security (AWS, Azure, Oracle Infrastructure Cloud)
- Someone with strong engineering mindset that software engineering experience
- Experience implementing pipeline automation and source code management

Additional standout skills:

- Hands-on experience with modern engineering technologies such as Kubernetes and Containers
- Experience with securing Terraform or other IaC platforms
- Delivered secure coding practices to large engineering teams
- Familiar with API Security
- Enabling DevSecOps within large organizations

Education.
- Security Architecture TOGAF/SABSA
- Cloud security certifications for OCI, AWS or Azure (Azure preferred)

**Get to know Syneos Health**

Over the past 5 years, we have worked with 94% of all Novel FDA Approved Drugs, 95% of EMA Authorized Products and over 200 Studies