Principal IT Security Architect

Summary

Join our team as a Principal Security Architect/Engineer and contribute to advancing the information security posture for Mattel's products, solutions, and systems. This role involves collaborative design reviews, threat modeling, security requirements, secure SDLC, vulnerability assessments, and security risk analysis. The ideal candidate will have experience with cloud security, strong technical skills, and excellent communication skills.

Requirements

• Thorough knowledge of all layers of the information security stack
• Thorough knowledge of securing cloud computing services; Compute, Containers, Datastores, Serverless, Networking, Access Management, Cryptographic Keys
• Proven understanding of cloud computing concepts and best practices
• In depth experience with one or more cloud platforms (GCP, Azure, OCI)
• Thorough understanding of code management and deployment; Code Repositories, CI/CD pipeline, application security
• Strong knowledge of security/compliance standards and industry best practices; NIST, PCI
• Demonstrable ability to maintain healthy working relationships with cross domain peers
• Proven track record of delivering security solutions given tight timelines
• Network Security, Web Application Security, Wireless (Bluetooth, WiFi, NFC) Security
• Ability to manage and configure industry standard security scanning tools
• Programming Languages: Java, .Net, Python, Go, Objective-C
• Bachelor’s degree with at least 10 years of professional experience

Responsibilities

• Collaborate with engineering teams to perform advanced security analysis on complex cloud systems, identifying gaps while contributing to design solutions and security requirements
• Be a subject matter expert on information security for complex systems and applications in cloud environments
• Ability to analyze security gaps and trends, while identifying and creating appropriate mitigating security controls and standards
• Efficiently assess risk accurately while negotiating priorities with cross-domain stakeholders
• Design security reference architectures and implementing/configuring security controls with an emphasis on cloud technologies
• Develop and maintain strategic and tactical roadmaps and plans to accomplish key security objectives and initiatives
• Be a shared owner in the secure design of Mattel’s public cloud infrastructure ensuring that appropriate security controls are incorporated
• Build and expand the security architecture standards for both cloud and on-premise systems
• Manage security scanning tools (network, application, and cloud services) and maintain an in-depth knowledge of remediation techniques and mitigating controls
• Maintain a thorough understanding of security threats and attacks to identify potential vulnerabilities along with their appropriate remediations
• Perform secure code reviews identifying potential issues while providing appropriate remediations
• Define security metrics, along with KRI/KPI/KGIs, to communicate project status and implementation efficacy