Software Security Architect

ThoughtLabs Belgium; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Job summary

ThoughtLabs Belgium is seeking a Senior Cybersecurity Architect to lead the design and governance of secure architectures across development lifecycles. You will create documentation, present to stakeholders, and drive security by design across platforms and services.

The role requires mastery of security architecture concepts, collaboration with security teams, and the ability to adapt to evolving threats. Remote possibilities may apply; strong communication skills are essential.

Qualifications

• Knowledge of secure development lifecycle.
• Knowledge of security architecture reference models and security solutions.
• Knowledge of the latest technologies and solutions.
• Knowledge of the latest cybersecurity trends.
• Ability to understand organisation’s mission and business objectives risks.
• Ability to conduct user and business requirements analysis.
• Ability to draw architectural and functional specifications.
• Ability to design cybersecurity systems and architectures based on security by design principles.
• Ability to guide and communicate with implementers and IT personnel.
• Ability to report, communicate and present to stakeholders.
• Ability to propose cybersecurity architectures based on stakeholder needs and budget.
• Ability to select appropriate specifications, procedures, and controls.
• Ability to build resilience across architecture.
• Ability to provide technological design leadership.

Responsibilities

• Sign and propose secure architecture to implement the organisation’s strategy.
• Develop organisation’s cybersecurity architecture addressing security and privacy requirements.
• Produce architectural documentation and specifications.
• Present high-level security architecture to stakeholders.
• Establish a secure environment during the development life cycle of systems, service, and/or products.
• Lead the development, integration and maintenance of cybersecurity components ensuring the cybersecurity specifications are met.
• Analyse and evaluate the cybersecurity of the organisation’s architecture.
• Assure the security of the solution architectures through security reviews.
• Collaborate with key security personnel and other teams applying security principles in the architecture.
• Evaluate the impact of cybersecurity solutions on design and performance of the architecture.
• Adapt the organisation’s security architecture to emerging threats.
• Assess the implemented architecture to maintain appropriate security.

Skills

Secure development lifecycle

Security architecture references

Emerging cybersecurity trends

Business risk analysis

Requirements analysis

Architectural design and specs

Security by design principles

Communication with stakeholders

Leadership and guidance to implementer

Security reviews and evaluation

Education

CISSP

CISM

SABSA SCF

CISSP-ISSAP

CGEIT

CRISC

SABSA SC Design & Development Practitioner

SABSA SC Design & Development Specialist

GSNA

GIAC GPPA

Equivalent international certifications

Tools

SharePoint

Job description

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• SABSA Chartered Security Architect - Foundation Certificate (SCF)
• CISSP-ISSAP ((ISC)2 Certified Informmation Systems Security Architecture Professional)
• CGEIT (ISACA Certified in the Governance of Enterprise IT)
• CRISC (ISACA Certified in Risk and Information Systems Control)
• SCPA (SABSA Certified Security Architecture Design & Development Practitioner)
• SCMA (SABSA Certified Security Architecture Design & Development Specialist)
• GSNA (GIAC Certified Systems and Network Auditor)
• GPPA (GIAC Certified Perimeter Protection Analyst)
• or an equivalent certifications recognized internationally (subject to acceptance as a valid credential by the Contracting Authority)

Knowledge and Skills:

• 01] Knowledge of secure development lifecycle
• [02] Knowledge of security architecture reference models and security solutions
• [03] Knowledge of the latest technologies and solutions
• [04] Knowledge of the latest cybersecurity trends
• [05] Ability to understand organisation’s mission and business objectives risks
• [06] Ability to conduct user and business requirements analysis
• [07] Ability to draw architectural and functional specifications
• [08] Ability to design cybersecurity systems and architectures based on security and privacy by design and by defaults principles
• [09] Ability to guide and communicate with implementers and IT personnel
• [10] Ability to report, communicate and present to stakeholders
• [11] Ability to propose cybersecurity architectures based on stakeholder’s needs and budget
• [12] Ability to select appropriate specifications, procedures, and controls (e.g., on Cryptographic models, access control techniques)
• [13] Ability to build resilience against points of failure across the architecture
• [14] Ability to provide technological design leadership

Specific Experties:

• 01] Mastery of Sharepoint and Sharepoint platform-specific tools
• [02] Expert in cybersecurity related to development and application architecture
• [03] Exceptional collaborative skills
• [04] Versatility in technologies and platforms

Responsibilities:

• sign, and propose secure architecture to implement the organisation’s strategy
• Develop organisation’s cybersecurity architecture to address security and privacy requirements
• Produce architectural documentation and specifications
• Present high-level security architecture to stakeholders
• Establish a secure environment during the development life cycle of systems, service, and/or products
• Lead the development, integration and maintenance of cybersecurity components ensuring the cybersecurity specifications are met
• Analyse and evaluate the cybersecurity of the organisation’s architecture
• Assure the security of the solution architectures through security reviews
• Collaborate with key security personnel and other teams in applying the security principles in the architecture
• Evaluate the impact of cybersecurity solutions on the design and performance of the organisation’s architecture
• Adapt the organisation’s security architecture to emerging threats
• Asses the implemented architecture to maintain an appropriate level of security