Principle Security Architect

Two95 International Inc.; San Jose; On-site; PHP 6,976,000 - 9,303,000; Full time

Job summary

A leading technology firm is seeking a Security Architect with over 12 years of experience in security research and software engineering. Responsibilities include defining security requirements, championing product security processes, and providing guidance on best practices for security in IoT platforms. Ideal candidates will have a strong background in cryptographic algorithms, networking, and software architecture, as well as excellent communication skills.

Qualifications

• Strong understanding of security in software development and IoT.
• Demonstrated experience in penetration testing and security assessments.
• Ability to mentor junior Security Engineers.

Responsibilities

• Define security requirements for IoT platforms.
• Champion the security SDLC including threat modeling and vulnerability management.
• Provide architectural guidance on best practices in security.

Skills

Cryptographic algorithms and protocols

Network protocols

End-to-end software architecture

Java

C/C++

Project planning and execution

Analytical and debugging skills

Excellent communication skills

Education

12+ years of experience in security research or software engineering

CISSP or equivalent certification

Job description

Title: Security Architect

Location: San Jose, CA

Duration: 6-9 Months Contract to Hire

Responsibilities:

• Define security requirements and checklist for IoT platforms.
• Champion the Client’s product security SDLC. This includes threat modeling, security testing, penetration testing, security code reviews, and secure design/architecture reviews, and identifying and fixing vulnerabilities in software and applications.
• Perform vulnerability research, assessment and management, serve as technical security/risk advisor on all new technology/developed by the Client.
• Provide architectural guidance and leadership on best practices regarding security in software development, IoT platform, mobile application, user interface design frameworks, high performance messaging solutions, server-side development, integrations and tools and technologies.
• Work across SW/HW engineering, production, and operations teams and ODM/OEM to identify component and system level security risks, determine technical security controls to mitigate risks, prioritize and schedule controls with product development timelines.
• Work with corporate security governance team to comply with internal SLA and policies.
• Mentor junior Security Engineers.
• Maintain knowledge of current and emerging technologies / products / trends related to security architectural solutions.

Qualifications:

• 12+ years of experience in security research, product security, and/or software engineering.
• Demonstrated expertise in cryptographic algorithms and protocols.
• Demonstrated expertise in network protocols.
• Demonstrated expertise in end-to-end software architecture.
• Proficiency in programming languages - Java, C/C++.
• Proficiency in Secure Boot and Trusted Execution Environment (TEE).
• Ability to present complex security topics to wide range of internal and internal audiences (engineers to executives).
• Strong project planning and execution skills.
• Excellent written & oral communication skills and coordination with peers, end-users, and management.
• Good analytical and debugging skills; creative ability, good organizational skills.

Preferred:

• CISSP or equivalent certification.
• Proficiency in audio and video streaming protocols.