Responsibilities

• Recommend and implement security tools, processes and procedures to assist with maintaining compliance of development systems
• Drive and maintain security throughout the entire Software Development Life cycle, incorporating Security and Privacy by Design principles
• Oversee application security testing including Static and Dynamic Code scans (SAST/DAST), Vulnerability Assessment and Penetration Testing (VAPT)
• Ensure product compliance with corporate policy, evolving industry standards, and relevant regulatory controls
• Ongoing reporting of compliance posture to senior management
• Document and communicate security features and best practices to internal and external stakeholders
• Participate in product risk assessments and threat modeling
• Support product team through internal and external audits

Required Technical and Professional Expertise

• 10 years of relevant industry experience
• 5 years of Information Security experience, including 3 years in Software Development
• Experience with Software Development Languages
• Familiar with common threats and vulnerabilities applicable to Web Applications and Middleware (eg. OWASP Top 10)
• Security certifications are an added bonus (CISSP, CCSP, CISM, CEH, etc)3 years experience working with SQL (Oracle, DB2) data storage and database servers
• Understanding and experience with noSQL data storage (MongoDB, CouchDB, etc.)
• Experience with development of application s with application servers (WAS, Liberty, Tomcat)

Preferred Technical and Professional Expertise

• Ability to adapt to changing requirements
• Proven interpersonal skills