Senior Product Security Engineer / Architect (Lausanne)

Tasks

• Deliver high value through collaboration with others across all levels of the product stack: from the foundation through databases, operating systems, web apps, SaaS IDE, RAG UI, SQL for RAG, M&D Ops, CRLR API (LLM), UI, QA, etc. All teams working together
• Be responsible for the technical specifications for specific safety-related use cases (end-to-end), from acceptance criteria through implementation to validation
• Create high- and low-level design documents that take security considerations into account
• Translate these architectural decisions into specific tasks for the team
• Provide architectural security consulting and support to the engineering team
• Collaborate across team boundaries (Development, Operations, Data Science, Data Engineering, etc.) to ensure alignment with security objectives
• Supporting the secure planning, deployment, and maintenance of our cloud services and products across cloud providers
• Create, provide, and maintain safety training materials

Responsibilities

• Promote security awareness in all aspects of software development, from design through deployment to operation
• Define and enforce effective architectures and design principles. 90% of the codebase is tested automatically. During this semi-annual testing cycle, there are issues that need to be addressed. It is your responsibility to ensure that security-related bugs are not overlooked.
• Ensure compliance with security standards (e.g., ISO 27001, SOC 2, NIST, GDPR, HIPAA/MHI, Swiss data protection laws)
• Identify and Mitigate Potential Threats and Vulnerabilities at the Architectural Level
• Develop and maintain security policies and procedures throughout the organization
• Implement and monitor internal and external security assessments to ensure that controls are in place to prevent data breaches and ensure compliance
• Work with legal, compliance, and incident response teams to meet regulatory requirements and mitigate risks
• Conduct regular security audits and reviews to ensure ongoing compliance
• Contribute to the continuous improvement of safety

Requirements

• More than 10 years of experience in software development, with a focus on security engineering or security architecture
• Proven experience in designing and implementing security solutions in cloud environments (AWS, Azure, or GCP)
• Strong knowledge of secure coding practices, application security, and the OWASP Top 10
• Practical experience with enterprise architectures (on-premises, cloud, or hybrid)
• In-depth knowledge of security protocols and frameworks (OAuth, SAML, JWT, TLS, etc.)
• Experience with security testing tools and methods (static/dynamic analysis, penetration testing)
• Strong written and verbal communication skills to articulate safety requirements and design documents for cross-functional teams
• Proven track record in implementing advanced security solutions in SaaS environments and managing security risks end-to-end
• Familiarity with DevSecOps practices and the integration of security into CI/CD pipelines
• Strong knowledge of the regulatory landscape regarding personal data (e.g., GDPR, LGPD, or CCPA)