Senior Product Security Engineer / Architect

Aufgaben

• Own functions securely in all applicable digital road products: Data/PREST, Server CAPTICA, New CAPTICA Connect, Document Management, Finance Services platform product, etc.
• Contribute to security strategy, 10090, confidentiality management, API, and product security
• Perform security analysis of application design, cryptography product, and, compliance, COIN integration, and cloud/host deployment
• Assist the team to understand design requirements and review designs for security risks
• Work with other security disciplines (AppSec, DLM, and Compliance)
• Review standards, policies, and procedures
• Review and respond to security incidents and issues
• Build and maintain security code catalogs, scanning tools in development cycles, software supply chain, resilience environments, and deployments patterns
• Put in place and drive ongoing cost engineering and effective product updates
• Implement architecture solutions, privilege management, security management, and operational security controls
• Support Incident response, vulnerability management, and security awareness training
• Support cloud security, EPPL policies, workbench, and regulatory compliance
• Conduct security reviews and security audits on products and prepare them in typical application of continuous testing.

Anforderungen

• Master's in computer science, IT security, engineering or equivalent
• 7+ years in application security, product security, software security, or system engineering
• Background in security and compliance, digital signing, and authentication
• Fluent English, and spoken French language

Kenntnisse

• Application & product security
• Strong cloud security knowledge experience in at least one of DS, D0C, PC, Tarus, Compliance
• Threat modeling, threat design reviews, and penetration testing
• Security architecture, threat modeling, and penetration testing
• Build and maintain security code catalogs, scanning tools in development cycles, software supply chain, resilience environments, and deployments patterns
• Manage and understand the security solutions in TLS, SSL, HTTPS, SLL/SAML, SSLA, and key management and key discovery, digital signatures, and signing workflows
• Awareness of ISO 20000 service security techniques

Intelligence & Security skills

• Strong cloud security experience
• Familiarity with cloud-related identity, access management, and security processes
• API security expertise, any referenced security is an advantage

Credentials & Certifications

• Experience with use of Taurus products: DocuSign, DocuSign, DocuSign Microsoft Access Base, DocuSign, and RDC, and SOA Admin, Azure Administrator Certification

Clear & Communication skills

• Comfortable engaging clients and teams, captains, suppliers, integration clients, and project CDDH's
• Write and present insights across teams clearly and concisely

Attributes

• Relentless and next contract mindset
• Easily adapt and learn quickly systems
• Easily adapt and learn software systems
• Good at setting people up and able to deal with complex problems
• Unshakeable confidence in complex problem-solving
• A strong desire for personal growth and continuous learning
• Work autonomously, self-awareness and high drive
• Understand the importance of independence, integrity, honesty, and reliability
• Team player with all collaborators
• Create a good working culture, celebrate success, keep sharing and mutual support

Wir bieten

• An opportunity to be at the intersection of digital and finance
• A varied and experienced team, building upon everyone's talents
• A fun-paced working environment, entrepreneurial spirit and team spirit
• A varied workload, balancing customer service with the business's best