Product Security Architect

Summary

Join Encora as a Security Architect and contribute to the success of the Product Security team. You will reduce security friction across engineering, fostering collaboration to enhance security posture. Security enablement, including research, secure architecture, and design, is crucial. You'll ensure solutions are secure by default and facilitate continuous security testing and reporting. Partnering with engineering and platform teams to solve complex security problems is a key responsibility. This role requires significant experience in multiple security domains and strong leadership skills.

Requirements

• 7+ year experience across multiple security domains with an emphasis on product security and cloud-native security
• 4+ year security architecture experience executing product security initiatives (i.e. secure architecture, SSDLC, threat models, and risk assessments)
• Expert knowledge of modern web application components, development, architecture, and design principles
• Hands-on experience with design, code review, and securing products and solutions for public cloud-based applications and infrastructure
• Experience architecting and developing product-centric security solutions
• Expert knowledge securing internal microservices and public API’s
• Experience securing applications deployed using Docker, Kubernetes, and public cloud environments
• Product Security experience working for a SaaS-based organization
• Excellent leadership and project management skills, with a track record of driving security initiatives within software development teams
• Excellent communication skills (both written and verbal)
• Self-motivated, self-directed, and self-organized

Responsibilities

• Partner with engineering and platform teams to identify and solve complex security problems
• Contribute to the vision and roadmap to increase the security posture of our code and products
• Conduct security reviews of product designs, code, and configurations to minimize software risk
• Conduct comprehensive threat modeling exercises and testing to identify security risks and vulnerabilities while collaborating with product teams
• Identify security gaps and provide strategic recommendations for remediation
• Address security issues identified throughout the secure software development lifecycle
• Conduct security testing beginning from the product planning phase continuing through production deployment
• Lead in the research, development, and implementation of new product security capabilities
• Develop and implement quantifiable application risk assessments of our client products and infrastructure
• Scale the impact of Cyber Security by contributing and leading various Security Champion Initiatives
• Define and implement security requirements ensuring alignment with industry standards and best practices
• Ability to work independently, and lead both cyber security and cross functional security initiatives
• Stay abreast of emerging security threats, vulnerabilities and controls

Preferred Qualifications

• SAST, SCA, DAST, WAF, and CNAPP solutions
• Offensive testing tools like Burp Suite and Kali Linux
• Penetration testing

Benefits

Work from home