Senior Product Security Architect

What you'll do

• Develop and implement repeatable application security architectures based on industry standards like ISO, PCI, and NIST.
• Perform threat modeling and design security architectures to mitigate risks across various product lines.
• Evaluate business cases and technical designs to ensure all new and legacy systems meet security policies.
• Manage the identification, measurement, and mitigation of security risks for information systems and infrastructure.
• Lead internal and external penetration testing efforts to identify and remediate gaps in security controls.
• Advise engineering teams on building cloud-native applications using microservices and best practices.
• Coordinate with customer banks to review penetration testing findings and implement required security improvements.
• Develop and maintain company-wide security policies, procedures, and reference architecture patterns.

What we're looking for

• Candidates must possess eligibility to work in the United States for any employer at the date of hire.
• Bachelor’s degree in Computer Science, Engineering, Math, or Physical Science is typically required.
• Requires engineering, IT, or Information Security experience.
• Requires 6+ years of combined experience in application security, security architecture, consulting, or related fields.
• Advanced knowledge of operating system, application, network, and database security architectures is required.
• Experience in threat modeling, control design, and designing security for cloud-hosted products is required.
• CEH/CPT, CISSP, or CSSLP certification and one of GWEB, Secure Development, PhD, or MBA in InfoSec (preferred).
• MCSE, SCSA, CCNA, or CISA certifications are preferred.