Software Security Architect

American Fidelity Corporation; Oklahoma City (OK); On-site; USD 90,000 - 130,000; Full time

Job summary

American Fidelity Corporation seeks a seasoned Software Security Engineer to lead and advance secure coding practices across the software division. You will educate teams, implement and manage security testing tools, and collaborate on remediation with project, risk, privacy, and audit stakeholders.

You will also shape secure architectures for new software, review designs, and document patterns to mitigate vulnerabilities while supporting vendor assessments and incident response activities.

Qualifications

• Must understand secure coding practices and ongoing education for software teams.
• Ability to interpret test results and remediate vulnerabilities with project teams.

Responsibilities

• Provide secure coding education via lunch n learns, formal classes, and courses.
• Evaluate, implement, test, and administer security tools; coordinate remediation with teams including governance and audit.
• Deliver secure architectures and designs for new software to mitigate vulnerabilities; assess vendor-supplied software.
• Perform architecture and design reviews from a security perspective on new systems and significant changes.
• Produce architecture diagrams and document secure design patterns for new software.
• Participate in incident response activities and assist with audits of secure software development practices.

Skills

Secure coding

Code reviews

Security architectures

Incident response

Audits & compliance

Vendor due diligence

Tools

Vulnerability testing tools

Penetration testing tools

Job description

• Provide deep expertise on secure coding practices. Regularly provide continuing education to the software department regarding secure coding practices in the form of lunch n learns, formal classes, and secure coding courses.
• Evaluate, implement, test, and administer security vulnerability and penetration testing tools. Interpret results from tests and collaborate with project teams to remediate any vulnerabilities found.
• Working with project teams, provide architectures and engineering designs for new software solutions that help mitigate possible security vulnerabilities. Perform due diligence from a software security aspect on any vendor supported software being considered by the organization.

Additional Job Description:

1. Evaluate, implement, test, and administer security vulnerability and penetration testing tools. Interpret results from tests and collaborate with project teams, security, risk management, compliance, internal audit, privacy officer, and other interested parties to remediate any vulnerabilities found.

30%

2. Regularly provide continuing education to the software department regarding secure coding practices in the form of lunch n learns, formal classes, secure coding courses, and team collaboration sessions. Keep abreast and keep software department informed of current security trends, new vulnerabilities or breaches in the industry, secure coding techniques, and new tools to help mitigate vulnerabilities. Document key components for writing secure code.

20%

3. Regularly perform code reviews for all project teams to help improve software security. Collaborate with, assist, and train developers on determining security vulnerabilities in code, and make changes to the code as necessary to remediate vulnerabilities. Perform architecture and design reviews from a security perspective on all new systems projects and on projects containing architecturally significant changes.

25%

4. Provide architecture diagrams and document design patterns for new software solutions that help mitigate possible security vulnerabilities. Participate in any divisional or departmental discussions related to defining or building new secure infrastructures or data designs.

5%

5. Perform due diligence from a software security aspect on any vendor supported software being considered by the organization.

10%

6. Participate in incident response activities to assist with identification, exposure, and mitigation of potential breaches. Additionally collaborate with IT Governance, Risk, & Compliance area and Internal Audit to conduct audits on secure software development practices, and to answer audit questions on software security from internal and external auditors.