Security Solutions Architect

We are seeking a highly skilled Security Solutions Architect to lead and mentor our R&D Security Champions. As a key member of our team, you will take ownership of the group's meetings and activities, providing security insights and feedback to R&D at a highly technical level.

Key responsibilities include leading R&D teams during threat modeling exercises and security risk analyses, challenging R&D teams and system architects about the integration of technical security controls, and designing and documenting technical security controls in different product lines.

You will also own and maintain process security controls in the design and development phases, provide security support during product penetration tests, and take ownership of incident response management and vulnerability disclosure processes.

Additionally, you will contribute to the creation of security whitepapers for our product lines and serve as a key contact point for security/privacy related topics during the pre-sales phase.

• Bachelor's/Master's degree in IT or information security, or equivalent by experience.
• At least 5 years of experience in information security management with a software development or software testing background.
• Experience with agile development process across international teams.
• Familiar with ISO x frameworks and risk assessment/treatment.
• Knowledge of third-party auditing and risk assessment methodologies.
• Familiar with security attack pathologies.

• Solid understanding of security protocols, cryptography, authentication, authorization, and best practices.
• Proven experience with leading and guiding a group of stakeholders from different functions through threat modeling, utilizing STRIDE or other frameworks.
• Excellent knowledge of the Common Vulnerability Scoring System (CVSS) and its application during technical vulnerability assessment.
• Experience with management of 3rd party vulnerabilities through analysis of Software Bill of Materials (SBOM).

• Holder of certifications like GIAC, CISSP, CISM.