Education: Minimum of a bachelor's degree in computer science, software engineering, cybersecurity engineering, or a closely related field OR equivalent experience demonstrating deep technical expertise in software development and cybersecurity.
Experience: 7+ years of hands-on engineering experience with a proven track record in implementing security solutions, including Zero Trust principles.
Knowledge: Strong understanding of Zero Trust principles, frameworks, and their application to software design, development, and deployment.
Skills: Expertise in secure coding practices, SecDevOps principles, and integrating Zero Trust into the SDLC.
Technical Proficiency: Experience with API security, application-level segmentation, and secure containerization technologies.
Key Responsibilities:
Security Architecture Development:
Provide expert guidance in developing a robust security architecture for software products, applications, and supporting infrastructure.
Ensure that security architecture aligns with Zero Trust principles and organizational security policies.
Technical Leadership:
Lead technical discussions to establish Zero Trust-informed, security-focused software design standards and maturity models.
Provide technical leadership and mentoring to development teams, fostering a culture of security awareness and best practices.
Secure Coding and Integration:
Design and implement secure coding practices, API security, application-level segmentation, and other Zero Trust components into software products.
Integrate Zero Trust principles into the Software Development Life Cycle (SDLC) to enhance overall security posture.
Evaluation and Optimization:
Conduct in-depth evaluations of the SDLC and identify areas of optimization from a Zero Trust and overall security perspective.
Recommend and implement improvements to enhance security and efficiency.
Collaboration and Communication:
Collaborate with cross-functional teams, including developers, operations, and security professionals, to ensure seamless integration of Zero Trust principles.
Communicate complex security concepts and solutions to both technical and non-technical stakeholders.
Additional Desired Qualifications:
Certifications: Relevant cybersecurity or Zero Trust engineering certifications (e.g., CISSP, CISM, CEH, ZTX).
Cloud Experience: Experience with cloud-based Zero Trust implementations, including AWS, Azure, or Google Cloud.
Programming Skills: Proficiency in multiple programming languages (e.g., Python, Java, C++) and familiarity with common development frameworks.
Tools Proficiency: Experience with vulnerability scanning and code analysis tools (e.g., SonarQube, Fortify, Checkmarx).