.JOB SUMMARYThe Cyber Security Solution Architect will use a data-driven and risk-based methodology to drive governance and solutioning in partnership with technology and software engineering organizations, including key product owners as stakeholders. The program will focus on addressing software engineering risks across products and platforms, leading the adoption of integrating security services into the development and delivery pipeline. By adopting a DevSecOps culture and manifesting a security champions initiative, the role aims to drive widespread accountability in maturing cyber risks associated with software. This role requires building cross-functional partnerships and deepening insights where security technology, platforms, and applications can become more resilient to cyber-attacks through the adoption of enterprise secure software development services.The ability to comprehend technical and business implications of security directives and to make effective requirements will be crucial in driving the success of modern security architecture adoption.JOB RESPONSIBILITIESEstablish a comprehensive software security enterprise program and partner with stakeholders to deliver:Develop and operate KPIs for the secure software engineering program.Enterprise strategy and architecture roadmap for multi-cloud platforms.Enterprise requirements for secure engineering within policies and standards.Solution service and tool integration within pipelines and DevSecOps models.Create & drive adoption of secure engineering practices.Align requirements to common cybersecurity frameworks such as NIST, Hitrust, CSF.Establish security champions to drive wider adoption and support within the enterprise.Partner with application program teams to align and integrate with IAM roadmap:Drive the creation & adoption of standard CI/CD pipelines with JIT assurance through solutions integrated into CI/CD pipelines.Publish patterns to drive adoption of DevSecOps solutions.Educate and drive engagement of modern IAM security architecture principles within the organization:Be a transformation agent in promoting a modern security engineering mindset.Perform design reviews to identify security architecture flaws.QUALIFICATION REQUIREMENTS:Architecture:5 years of experience delivering secure development programs and implementing DevSecOps within large enterprises.5 years of experience integrating security development services into CI/CD pipelines.Strong familiarity with exploitation techniques and the Mitre ATT&CK framework.Engineering:3 years of experience engineering:Source code IDE, CI/CD scanning.Infrastructure as Code (IaC).Static and dynamic testing tools.Secure code repositories and advanced security services.Education:College degree or 5 years of experience as a security engineer or 7 years as an enterprise security architect in relevant subject areas.DevSecOps and secure software engineering certifications
