Global Software Security Architect - Secure Dev Lifecycle

Lenovo; Raleigh (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Lenovo is seeking a Senior Software Security Architect in the Security Center of Excellence for PC and Smart Devices, based in Morrisville, NC. You will lead a global team of security champions, assess security posture of Lenovo apps for Windows and Android, and help secure preinstalled software across Lenovo devices.

You will guide secure development practices, review architectures, and work with cross-functional teams to address vulnerabilities, ensuring Lenovo’s portfolio remains secure and

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, or related field; or relevant cybersecurity experience of 5+ years.
• 2+ years experience in Computer Security with experience in secure product design, vulnerability management, ethical hacking, and product security testing; 2+ years experience in developing apps for Windows and Android operating systems, using common languages such as C# or Java; Familiarity with security testing tools like Burp Suite, Kali, ZAP.

Responsibilities

• Lead a global team of development security champions to assess the security posture of Lenovo developed applications for Windows and Android devices.
• Conduct security assessments of client applications, both Lenovo developed and 3rd party, using industry-standard tools to identify vulnerabilities.
• Risk-ranking of identified threats to prioritize mitigation and remediation activities.
• Help train members of development teams in secure development best practices
• Perform security code reviews of application source code
• Participate in software design sessions with development teams for secure design and architecture of PC application software
• Collaborate with development teams to review and address security of Lenovo- and third-party–developed software
• Act as a trusted advisor on secure application design, development and validation
• Identify and evaluate needed tools and refine security review processes
• Define security requirements for Lenovo and third-party development teams
• Stay current in latest security tools and practices for Windows and mobile app development
• Act as a Secure Development Lifecycle evangelist within the PCSD group

Skills

Security assessments

Vulnerability management

Secure development

Code reviews

Threat modeling

Windows/Android development

C#

Java

Burp Suite

Kali

OWASP

Reverse engineering

Education

Bachelor's degree in Computer Science/Engineering or related field

Tools

Burp Suite

Kali Linux

OWASP ZAP

Job description

Lenovo is seeking a Senior Software Security Architect in the Security Center of Excellence for PC and Smart Devices, based in Morrisville, NC. You will lead a global team of security champions, assess security posture of Lenovo apps for Windows and Android, and help secure preinstalled software across Lenovo devices.

You will guide secure development practices, review architectures, and work with cross-functional teams to address vulnerabilities, ensuring Lenovo’s portfolio remains secure and