below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$166,590–$220,100.
Based on 240 similar postings.
Employer
About Early Warning Services
Early Warning Services is a fintech company that operates the Zelle person-to-person payments network, the Paze digital checkout wallet, and Certos fraud prevention and identity risk solutions for financial institutions.
Early Warning Services currently has
83 open roles
on FindRole.
Listed pay typically runs
$147,500–$180,500
across 32 roles with salary data.
The Senior Product Security Architect joins the product security team to consult with project management, product development, and engineering groups. This role focuses on maturing the product security program by building and enhancing security in products and services. Key responsibilities include developing repeatable application security architectures, performing threat modeling, and managing security analysis for internally developed products. The architect ensures compliance with frameworks like ISO, PCI, OWASP, and NIST 800-53 while designing security for cloud-native applications and microservices. Required technical skills include advanced knowledge of relational databases, Windows, Linux, and public cloud architectures like GCP, AWS, and Azure. The role also involves using tools like Veracode and Fortify to integrate security controls into CI/CD pipelines to protect the integrity and confidentiality of financial systems.
Develop and implement repeatable application security architectures and security reference patterns.
Perform threat modeling and security analysis on all internally developed products and services.
Evaluate product business cases and design specifications to ensure compliance with security standards.
Lead efforts with internal and external penetration testing organizations to identify and mitigate security gaps.
Advise on and approve architectural changes for assigned areas from a security perspective.
Drive the adoption of cloud-native security and microservices best practices.
Interact with customer banks to review penetration testing findings and rectify security vulnerabilities.
Assist in the security incident response process and contribute to the development of security policies.
What we're looking for
Candidates must independently possess the eligibility to work in the United States for any employer.
Bachelor’s degree in Computer Science, Engineering, Math, or Physical Science.
10 or more years of engineering, IT, or Information Security experience.
6 years of combined experience in application security, Security Architecture, Consulting, or related IT/Information Security.
Advanced knowledge of relational databases, Windows, and Linux operating systems.
Advanced knowledge of operating system, application, network, and database security architectures.
Application development and/or Software Security background.
Experience in Threat Modeling, control design, and designing security for Cloud hosted products.
Knowledge of Security Integration into CI/CD and experience driving CI/CD adaptation for Security controls.
CEH/CPT, or CISSP or CSSLP Certification and one of GWEB, or Secure Development Cert, or PHD or MBA in InfoSec or equivalent certification (preferred).
MCSE, SCSA, CCNA or CISA certification (preferred).
In depth knowledge with public cloud architecture (GCP, AWS, Azure) and virtualization technologies (Kubernetes, VMware, OpenStack) (preferred).
Experience with automation tools and methodologies associated with DevOps and CI/CD pipelines (preferred).
Familiarity with SAST like Veracode, Fortify and Composition Analysis tools (preferred).