Director, Cyber Security Wanted!

HealthCare Talent; Irvine (CA); On-site; USD 130,000 - 160,000; Full time

Job summary

HealthCare Talent is looking for a Director of Cyber Security to establish a Center of Excellence focused on application software security. This leadership role will collaborate with the Platform R&D team to ensure security best practices are integrated into software development.

The ideal candidate will have 10-15 years of software development experience and must possess certifications such as CISSP and CCSP. Strong leadership and strategic planning skills are essential for this position, which requires excellent communication and technical aptitude.

Qualifications

• 10-15 years of software development experience.
• 3-5 years management or project management experience.
• Certifications: CISSP, CCSP, MCSD.

Responsibilities

• Establish a Center of Excellence for application software security.
• Collaborate with software architects and product managers on security direction.
• Design end-to-end security architectures for products.

Skills

Leadership Skills

Strategic Planning

Goal Oriented

Change Management

System Analysis

Technical Aptitude

Education

Computer Science or a related field

Tools

Fortify

WebInspect

AppDynamics

CAST

Job description

The Director of Cyber Security will be responsible for establishing and growing a Center of Excellence around application software security-related concerns and opportunities within and across the R&D organization for our Client.

This position will be an important, active part of the Platform R&D leadership team and will report directly to the SVP.

This position will accomplish this critical mission through a matrix organization of embedded security points of contact across teams within Portfolio R&D.

Initially this position will serve in a Project Manager capacity with no direct reports. ( Eventually this role may manage a virtual team.) The Director will educate and collaborate with software architects, product managers, and executives on an on-going basis. The goal will be to participate and contribute to technical direction on various security areas.

Job Description

• Provide leadership and expertise in the development of new software development standards, processes and capabilities. Recommends and justifies major changes to existing products/services/processes to simplify developer adoption of security services and best practices.
• Take an active role in the definition and enhancements in the area of application centric security products, services and APIs.
• Work with software architects, product managers, and executives on an on-going basis to participate and contribute to technical direction on various security areas.
• Design end-to-end security architectures that are consistent and common across platforms.
• Advance existing products with next generation identity and access management integration standards like OAuth, Cloud security, and RESTful security.
• Document and share security best practices across the R&D organization.
• Provide direction and mentoring to engineers across multiple geographic development locations.
• Proactively work closely with the Chief Security Officer to pull forward security upfront in the software development life cycle. Also partner with the Chief Security Officer in the remediation of security-related audit findings and other concerns.

Qualifications

SKILLS & ABILITIES

• Leadership Skills: Ability to motivate and guide others to ensure performance is in accordance with clear expectations and goals.
• Strategic Planning: Ability to develop a vision for the future and create a culture in which the long range goals can be achieved.
• Goal Oriented: Ability to help ensure that team members are invested in team activities and decisions, and that the team works together to achieve a goal.
• Ability to act and take steps to solve or settle an issue.
• Change Management: Ability to encourage others to seek opportunities for different and innovative approaches to addressing problems and opportunities.
• System Analysis: Ability to determine how a system should work and how changes in conditions, operations, and the environment will affect outcomes.
• Technical Aptitude: Ability to relate to topics which require an understanding or specialized knowledge; familiarity with tools/techniques across different technology stacks, including .NET, Java and PHP.

EDUCATION AND QUALIFICATIONS

• Certifications: CISSP, CCSP, MCSD.
• Field of Study: Computer Science or a related field.
• Experience: 10-15 years of software development experience.
• 3-5 years management or project management experience, working with members on a national level.

COMPUTER SKILLS

• Experience with Fortify, WebInspect and/or similar analysis tools in an automated, continuous improvement context with product development teams/colleagues.
• Experience with AppDynamics, CAST or other Application Intelligence Platform (AIP).

OTHER REQUIREMENTS

• Excellent written and verbal communication skills.
• Experience incorporating OWASP and similar SME communities into internal standards and best practices.
• Experience working with third party SMEs for application security assessments, etc.
• The ability to travel nationally: Initially travel may be 30% or more, and over time will be about 20% of the time.