Position: Product Security Architect
Company: SkillSquare
Experience required: 5y
Category: Security
English level: upper
Published: 2022-12-01T00:00:00+02:00

As a gesture-tech company, we are in need of an expert in product security with broad and deep security experience spanning from embedded devices to mobile software and the cloud. As a Product Security Architect, you will work with a multi-functional engineering team.

**What You Will Be Doing:**

● Evaluate our existing system architecture and come up with a roadmap to accomplish acceptable security for mass market adoption of our products

● Establish our data privacy strategy and topology mutually with external technical stakeholders using our technology

● Create formal threat models to enumerate and mitigate potential security risks in proposed architecture and designs

● Brief executive leaders on potential emergent threats and ongoing efforts to proactively address potential security risks

● Act as domain specialist across our company’s security solutions and technology stack

● Identify strategic investments and initiatives that lower the transactional cost of designing and implementing secure platform solutions and reduce the likelihood of potential security attacks

● Communication with multi-functional teams

**Expected Skills/Abilities:**

● 10+ years of hands-on experience in working with engineering teams on design and implementation of security best practices in architecture and code.

● 10+ years of experience working with product security teams to drive engineering remediations to externally identified threats and vulnerabilities.

● 7+ years of experience with creating threat models and working with teams to identify and remediate potential security gaps related to authentication, authorization, network segmentation, encryption, container configuration, etc.

● Extensive experience and strong understanding of Google Cloud Platform services and cloud security controls.

● Knowledge and Hands-on Skills with Docker, ECS, Kubernetes, and Container Security.

● Broad security-related domain knowledge with authentication and authorization, identity and access management, data protection, OAuth/Open ID connect, OpenAPI/Swagger, Web security.

● Extensive experience with embedded software development and architectures, security protocols, applied cryptography, and security standards

● Deep understanding of the TCP/IP protocol stack and significant protocols.

● Working knowledge of one or more general-purpose programming/script languages, including but not limited to: Kotlin, Java, C/C++, Python.

● Excellent relationship-building skills across diverse cross-functional teams.

● Outstanding written and oral presentation skills to convey technical concepts to internal and external stakeholders

**It would be nice, but not necessary, for you to have the following:**

● Experience in SoC encryption and intellectual property security

● Education/ Experience: Bachelor’s degree in Software Engineering, Computer Science, or a related field. Master’s degree is a plus.

● Security certifications such as Google Cloud Platform’s Professional Cloud Security Engineer, CISA, CISM, CISSP, CCSP