Principal Security Architect

This role provides leadership and influences cybersecurity strategy across business initiatives and applications. You will align with business strategy and delivers cybersecurity expertise. You'll also provide a holistic focus across infrastructure, application security, vulnerability management and third-party partnerships and dependencies. Across collaborative teams, you'll define, documents, maintains, and enforces the practices and policies that are the pillars of the cybersecurity program. You'll work in lockstep with product, IT and risk management leadership and is united in a common goal of building functional, reliable and secure products.

This is a highly visible role interfacing with multiple internal and external teams. Successful candidates in this role possess technical skills and business acumen and can effectively communicate complex topics. You'll understand how attackers think and their motives, while at the same time understanding corporate business objectives.

What you'll be responsible for:

• Collaborate and consult with development, DevOps, infrastructure, and business units to establish security design requirements.

• Provide leadership and direction with security practices and methodologies in product security.

• Serve as a central point of contact to establish cybersecurity requirements and initiatives for new products and systems.

• Enforce security standards and implementation configurations, as well as common security frameworks.

• Communicate and recommend changes to the product ecosystem designed to mitigate security issues.

• Uphold product cybersecurity principles to meet compliance, privacy laws and regulatory requirements.?

• Document architectural diagrams to support security engineers on applying security controls and configurations.

Experience and Education:

• 7+ years of experience in cybersecurity with a product and application security engineering background

• Bachelor's degree in Computer Science or related field.

• CISSP and SANS certification is a plus.

Some additional skills and abilities we're seeking:

• Proficient in application security, APIs, vulnerability management, threat modeling and risk management.

• Well-versed with application security tools, public cloud providers, CI/CD platforms and container services.

• Strong knowledge of security technologies and best practices.

The work environment characteristics described here maybe encountered while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Moderate noise (i.e. business office with computers, phone, and printers, light traffic).

• Ability to work in a confined area.

• Ability to sit at a computer terminal for an extended period of time. Occasional stooping or kneeling may be necessary.

• While performing the duties of this job, the employee is regularly required to stand, sit, talk, hear and use hands and fingers to operate a computer keyboard and telephone.

• Specific vision abilities are required by this job due to computer work.

• Light to moderate lifting is required.

• Regular, predictable attendance is required.

• Add any travel or other physical requirements, as needed

#LI-JC1