Overview
Arquitecto Seguridad (GTB)
Location Málaga
The person will be a candidate to be hired internally.
Responsibilities
- Evaluate and review security architectures of the projects ensuring compliance with internal policies and principles.
- Support the implementation of reference architectures, facilitating the adoption of the technologies and products of each project.
- Ensure compliance with Corporate Security policies, generating compliance standards for architectures.
- Ensure compliance with security reference standards, considering the recommendations of the Cyber Global architecture teams.
- Identify the best practices and trends applicable in security architectures.
- Align with the Global Cyber Security architecture teams, with active participation in global initiatives.
- Work closely with the CTO Architecture team.
- Engage with CISO SCIB for alignment and priority definitions.
- Provide general advice in security topics.
Qualifications
- Experience: More than 15 years of experience in IT, and at least 10 years of experience in a similar position.
- Education: Bachelor or Degree in Engineering, Computer Science and / or Telecommunication or similar background.
- AWS Certifications (is a must).
- Recognized Cyber Security certifications (at least one is a must) such as ISACA, NIST, ISO, CompTIA Security+, CISSP+… etc.
- Vendor certifications (desired) such as Palo Alto, Checkpoint, Cisco.
- Skills & Knowledge: Advanced English and Spanish level.
- Operational and analytical Cybersecurity: Digital Identity and Access Management (mastering the SAML and OpenID Connect standards).
- API security access: mastered in OAuth 2.0 JWT Bearer Grant and Auth Code with PKCE.
- Good understanding of OSI Model in Network Layer.
- Secrets management.
- PKI environments, cryptography, CMEK / BYOK.
- Risk assessment / Impact analysis.
- AWS architecture practitioner.
- Threat modeling methodologies (STRIDE).
- Networking, security and high availability of telecommunications systems and services in each network layer.
- Experience in designing security solutions and architectures.
- Mastering documentation tasks.
- More extensive knowledge of cybersecurity: cyber-attack, cyber defense, secure architecture, security management and administration.
- Knowledge of microservices architecture: Docker, Kubernetes, etc.
- Knowledge of SecDevOps.
- Development and good coding methodologies knowledge.
- TOGAF desired.
Other information
- Strong communication skills, with high ability to work as a team.
- Accuracy and attention to detail.
- Banking scope knowledge.
- Critical thinking.
- Interpersonal relationships.
- Work under pressure.
- Problem solving.
- Optimism regarding uncertainty.
- Takes ownership.
- Let’s connect if you’re passionate about building the future of technology!