Senior Software Product Security Engineer

Job Description

The Senior Software Product Security Engineer will identify security related requirements, analyze our software designs and implementations from a security perspective to identify and resolve security issues. Responsibilities include, but not limited to, appropriate security analysis, defenses and countermeasures at each phase of the software development lifecycle, to result in robust and reliable software for on-premises and cloud based systems.

Job Duties

* Plan, test and implement advanced software security techniques in compliance with technical reference architecture.

* Organize on-going security testing and code review to improve software security.

* Detect, troubleshoot and debug issues that arise.

* Prepare engineering designs and implement software solutions to help mitigate security vulnerabilities.

* Lead and document threat analysis and software security risk assessment.

* Participate in the agile team's work at all levels of the architecture, development, testing.

* Serve as subject matter expert to the development teams, be security minded evangelist to raise the level of understanding and compliance.

* Develop and document processes and work instructions.

* Provide help and consulting to team members on secure coding practices.

* Stay informed about new tools, regulations, standards, and best practices of the industry.

* Other duties as required.

Job Requirements

REQUIRED QUALIFICATIONS

* Bachelor's degree in Computer Science or related area required, or minimum of 5 years’ experience in a relevant industry.

* Minimum of 2 years’ experience working as a Software Security Engineer position or minimum of 5 years’ experience as a Software Engineer required.

* Occasional travel may be required.

PREFERRED QUALIFICATIONS

* Experience in using Secure Software Development Lifecycle (SSDLC) within agile framework.

* Experience and/or knowledge of application security and code analysis tools such as Veracode, SonarQube, Cyberspect, Nessus or similar.

* Experience with security techniques, standards and methods for authentication and authorization, applied cryptography, security vulnerabilities and remediation in Windows .NET and Azure environments.

* Experience as a software developer in one of the following core languages: .NET, C#, Javascript, Angular framework.

* Experience or knowledge of web related technologies (Web applications٫ Web Services and Service Oriented Architectures) and of network/web related protocols.

* Experience or knowledge in threat modelling, failure modes identification and security risk assessment and management.

* Experience or knowledge of government and industry standards, guidance’s and frameworks applicable to product software development such as NIST Cybersecurity Framework, OWASP, HIPAA, SANS/CWE and/or CERT.

* Solid technical background and understanding of all aspects of security research and development.

* Excellent analytical and troubleshooting skills.

* Ability to work both independently and in a team environment.

* Excellent communication skills, oral and written.

* Able to work in a multi-discipline collaborative environment to include international colleagues and Olympus partners.

#LI-LR1