Senior Architect - Product Security

Description

Responsibilities

Define and enforce secure coding standards and best practices.

• Perform threat modeling, security architecture reviews, and code analysis.
• Design and implement secure CI / CD pipelines with integrated security controls.
• Automate security testing (SAST, DAST, IAST, SCA, container scanning) in SDLC process.
• Evaluate and integrate security tools and platforms
• Lead DevSecOps program in collaboration with DevOps, Operations and Engineering teams
• Build automation focused on efficiency (E.g. increase triaging efficiency, manage false positives etc.)
• Leverage ASPM and build workflows and reports
• Evaluate and integrate security tools and platforms
• Implement Infrastructure as Code (IaC) security and cloud-native security controls.
• Monitor and respond to security incidents in development and production environments.
• Collaborate with development teams to remediate vulnerabilities and design secure applications.
• Develop and deliver secure coding training and awareness programs.
• Stay current with emerging threats, vulnerabilities, and security technologies.
• Ensure compliance with industry standards (e.g., OWASP, NIST etc).

Requirements

Overall 10+ years of experience in application security, software development, or related roles.