Software Security Engineer/Architect

AFA American Fidelity Assurance Company; Oklahoma; On-site; USD 90,000 - 130,000; Full time

Job summary

American Fidelity is seeking a software security expert to provide deep expertise on secure coding practices and educate the software department via lunch-and-learns, formal classes, and secure coding courses.

You will evaluate and administer testing tools, collaborate with project teams to remediate vulnerabilities, and contribute to secure architectures for new solutions, while performing vendor due diligence and supporting audit inquiries.

Qualifications

• Experience evaluating and implementing security vulnerability and penetration testing tools.
• Ability to conduct code reviews to improve software security.
• Proven capability to design secure architectures for new systems.
• Experience performing vendor due diligence on software.
• Ability to collaborate with risk, compliance, and audits on secure SDLC.

Responsibilities

• Evaluate, implement, test, and administer security tools to identify vulnerabilities.
• Provide architectures and engineering designs for secure software solutions.
• Remediate vulnerabilities with project teams after testing.
• Conduct vendor software due diligence and security assessments.
• Assist in incident response activities and audit inquiries.

Skills

Secure coding

Code review

Security architecture

Incident response

Training & education

Tools

Vulnerability scanners

Penetration testing tools

Threat modeling tools

Job description

Provide deep expertise on secure coding practices. Regularly provide continuing education to the software department regarding secure coding practices in the form of lunch n learns, formal classes, and secure coding courses. Evaluate, implement, test, and administer security vulnerability and penetration testing tools. Interpret results from tests and collaborate with project teams to remediate any vulnerabilities found. Working with project teams, provide architectures and engineering designs for new software solutions that help mitigate possible security vulnerabilities. Perform due diligence from a software security aspect on any vendor supported software being considered by the organization.

Additional Job Description:

• Evaluate, implement, test, and administer security vulnerability and penetration testing tools. Interpret results from tests and collaborate with project teams, security, risk management, compliance, internal audit, privacy officer, and other interested parties to remediate any vulnerabilities found. 30%
• Regularly provide continuing education to the software department regarding secure coding practices in the form of lunch n learns, formal classes, secure coding courses, and team collaboration sessions. Keep abreast and keep software department informed of current security trends, new vulnerabilities or breaches in the industry, secure coding techniques, and new tools to help mitigate vulnerabilities. Document key components for writing secure code. 20%
• Regularly perform code reviews for all project teams to help improve software security. Collaborate with, assist, and train developers on determining security vulnerabilities in code, and make changes to the code as necessary to remediate vulnerabilities. Perform architecture and design reviews from a security perspective on all new systems projects and on projects containing architecturally significant changes. 25%
• Provide architecture diagrams and document design patterns for new software solutions that help mitigate possible security vulnerabilities. Participate in any divisional or departmental discussions related to defining or building new secure infrastructures or data designs. 5%
• Perform due diligence from a software security aspect on any vendor supported software being considered by the organization. 10%
• Participate in incident response activities to assist with identification, exposure, and mitigation of potential breaches. Additionally collaborate with IT Governance, Risk, & Compliance area and Internal Audit to conduct audits on secure software development practices, and to answer audit questions on software security from internal and external auditors. 10%

American Fidelity is a certified Great Place to Work for All! No matter where you work in the organization, you have a chance to make a difference. Our culture focuses on helping Colleagues to be their best! We work hard to make a difference to our Customers and community, focus on teamwork and collaboration and always offer a different perspective - a different opinion. We want to meet you! American Fidelity specializes in the education, public sector, automotive and healthcare industries with products like group and individual life, health and annuity services as well as other financial security products and services. We’re focused on offering a different opinion to our Customers – making things easier for them by providing benefits administration and education. For our policyholders, we help provide financial security through our benefit offerings, which provide coverage for some of life’s worst events – cancer, accidents, critical illnesses, death and more – and for some of life’s best – childbirth, retirement and more. Learn more about us!