Senior Product Security Engineer / Architect (Lausanne)

Tasks

• Working with product teams to identify and address security risks in product design and development
• Development and maintenance of a security architecture framework that complies with industry best practices and regulatory requirements
• Conducting security assessments, code reviews, and penetration tests to identify vulnerabilities and recommend remediation strategies
• Design and implementation of secure communication protocols and encryption mechanisms to protect data in transit and at rest
• Collaborate with legal and compliance teams to ensure that products comply with applicable regulations and industry standards
• Providing guidance and training to product developers on secure coding practices and security best practices
• Monitoring and responding to security incidents, coordinating with incident response teams to mitigate risks and strengthen defenses
• Staying up to date on the latest threats and technologies, and evaluating and implementing new tools and techniques as needed
• Contribute to the development of security policies, standards, and processes to improve the organization's overall security posture

Requirements

• More than 5 years of experience in product safety engineering, including at least 3 years in a leadership or architect role
• Proven track record in designing and implementing security solutions in product development
• In-depth knowledge of security architecture principles, including threat modeling, risk assessment, and mitigation strategies
• Strong knowledge of secure software development lifecycle (SDLC) practices and secure coding standards
• Familiarity with relevant security standards and regulations, such as ISO 27001, the GDPR, and other applicable standards
• In-depth knowledge of network security, including firewalls, IDS/IPS, VPN, and VPN protocols
• Proficiency in one or more programming languages (e.g., Python, C++, Java, JavaScript, etc.)
• Knowledge of DevSecOps practices, including the integration of security into CI/CD pipelines
• Strong analytical and problem-solving skills, with the ability to work both independently and as part of a team
• Effective communication skills, with the ability to convey security risks and recommendations to non-technical stakeholders
• Strong analytical skills, combined with the ability to think critically and creatively
• Excellent communication and collaboration skills across cross-functional teams
• Ability to work in a fast-paced environment and manage multiple tasks and projects
• Attention to detail with a focus on quality and thoroughness
• Ability to work independently and as part of a team

We offer

• Competitive compensation and a benefits package
• Opportunities for Career Growth and Training
• A supportive and collaborative work environment
• Flexible work arrangements to promote work-life balance