Senior Product Security Engineer / Architect

Tasks

• Securely implement custom functions in all relevant digital road products: Data/PREST, Server CAPTICA, New CAPTICA Connect, Document Management, Finance Services platform product, etc.
• Contribute to security strategy, 10090, confidentiality management, API, and product security
• Perform security analysis of application design, cryptographic products, compliance, COIN integration, and cloud/host deployment
• Help the team understand design requirements and review designs for security risks
• Collaborate with other security disciplines (AppSec, DLM, and Compliance)
• Review standards, policies, and procedures
• Review and respond to security incidents and issues
• Build and maintain security code catalogs, scanning tools in development cycles, the software supply chain, resilience environments, and deployment patterns
• Implement and drive ongoing cost engineering and effective product updates
• Implement architecture solutions, privilege management, security management, and operational security controls
• Support for incident response, vulnerability management, and security awareness training
• Support for cloud security, EPPL policies, Workbench, and regulatory compliance
• Conduct security reviews and security audits on products and incorporate them into a typical continuous testing workflow.

Requirements

• Master's degree in computer science, IT security, engineering, or an equivalent field
• 7+ years of experience in application security, product security, software security, or systems engineering
• Background in security and compliance, digital signatures, and authentication
• Fluent in English and spoken French

Knowledge

• Application and Product Security
• Extensive knowledge and experience in cloud security in at least one of the following: DS, D0C, PC, Tarus, or Compliance
• Threat modeling, threat design reviews, and penetration testing
• Security architecture, threat modeling, and penetration testing
• Build and maintain security code catalogs, scanning tools in development cycles, the software supply chain, resilience environments, and deployment patterns
• Manage and understand security solutions related to TLS, SSL, HTTPS, SSL/SAML, SSLA, key management and key discovery, digital signatures, and signing workflows
• Awareness of ISO 20000 Service Security Techniques

Intelligence & Security Skills

• Extensive experience in cloud security
• Familiarity with cloud-related identity, access management, and security processes
• API security expertise; any relevant security experience is a plus

Credentials & Certifications

• Experience with Taurus products: DocuSign, DocuSign, DocuSign Microsoft Access Base, DocuSign, RDC, SOA Admin, and Azure Administrator Certification

Clear Communication Skills

• Comfortable interacting with clients and teams, team leaders, suppliers, integration clients, and project CDDHs
• Write and present insights across teams clearly and concisely

Attributes

• A relentless mindset and a focus on the next contract
• Easily adapt to and quickly learn systems
• Easily adapt to and learn software systems
• Good at helping people get started and able to handle complex problems
• Unwavering confidence in solving complex problems
• A strong desire for personal growth and continuous learning
• Ability to work independently, self-awareness, and a strong drive
• Understand the importance of independence, integrity, honesty, and reliability
• A team player who works well with all colleagues
• Create a positive work culture, celebrate success, and continue to share and support one another

We offer

• An opportunity to be at the intersection of digital technology and finance
• A diverse and experienced team that builds on everyone's talents
• A fast-paced work environment, entrepreneurial spirit, and team spirit
• A varied workload that balances customer service with the company's best interests