Cyber Security Architect

KMR Search Group · United States · 11 hours ago

Work mode: Remote
Category: Security
Experience: 3+ years

authentication csharp dotnet networking nist owasp penetration-testing risk-assessment secure-coding

This is a remote position.

As the Cyber Security Architect you will partner with our product development and engineering organizations to enable them to build and enhance security in the Diabetes care and Digital Health products and services.

The right candidate is a positive, forward-looking person who must be self-directed requiring minimal daily direction, collaborates often and effectively with project team members, presents a positive and professional demeanor with customers, and excels at solving difficult problems.

You will evaluate product designs and provide solutions to remediate security vulnerabilities through product security risk assessments, vulnerability scans, and static code analysis. In addition to security solutions for new product development, the role requires remediating vulnerabilities with existing products which requires detailed attention to implementation and product risk.

The Cyber Security Architect will participate in a full medical software development life cycle and adhere to a quality management system.

In this role you will be responsible for:

Design and Implement software security solutions in accordance with industry accepted standards for encryption, recovery, authentication, audit logging, hardening measures, patch management, vulnerability monitoring, and antivirus/antimalware.
Develop and administer software engineering procedures and training for vulnerability scans and static code analysis
Lead product security risk assessments, hazard analysis, and provide vulnerability remediation guidance and mentoring to product development software engineers.
Keep abreast of advances in secure system design and development practices, threats and threat actors, and new attack techniques or areas of security research, and provide guidance to the product organizations to help them avoid or mitigate future security concerns.
Assist product development teams in creating Incident and Vulnerability Management Plans and Product Security White Papers
Participate on product security incident response teams.
Interface with other technical departments such as Penetration Testing Team, Systems and Hardware Engineering
Interface with Quality and Technical Service
Demonstrate proper secure coding practices driving standards within the software engineering organization
Lead technical design reviews and code inspections. Provide clear, actionable feedback for project team members

To be successful in this role, you require:

Knowledge of common security standards and best practices, such as NIST 800-53/800-160, ISO 270xx, CWE, CVSS, OWASP Top 10, CERT Secure Coding Standards
Knowledge of Windows networking fundamentals (IP protocol, switches, routers)
Demonstrated understanding of developing in a regulated environment and adhering to a quality management system
Excellent written and verbal communication and interpersonal skills are essential
Demonstrated positive work ethic with a strong commitment to achieving project goals

Education and experience required:

BS degree in Computer Science, Computer Engineering, Electrical Engineering, or other related engineering field is required
Minimum of 5 years of experience in software development, systems & architecture concepts and designs
Minimum of 5 years work experience implementing security controls in software
Minimum of 5 years work experience with C#/.NET development
Minimum of 3 years work experience using secure coding practices

Cyber Security Architect

This is a remote position.

In this role you will be responsible for:

To be successful in this role, you require:

Education and experience required:

Similar jobs

Experienced Software Development Engineer

Security Architect, Business Enablement