ABOUT THE POSITION
The Product Security Architect Digital and Enterprise Applications role is a strategic position designed to ensure that security is seamlessly integrated into the lifecycle of both digital and corporatefacing applications. This role will focus on designing reviewing and implementing robust security solutions to protect sensitive data and business logic within a diverse portfolio of software applications including cloudbased and onpremises solutions. The ideal candidate will have expertise in application security secure architecture and threat modeling with a passion for advancing security practices within an agile development environment. This role reports directly to the Head of Product Security.
Key Responsibilities Include:
Collaborate with crossfunctional teams to define security requirements for new and existing products.
Lead threat modeling sessions to identify and mitigate potential security risks.
Perform security architecture reviews to validate application security across cloud and onpremises solutions.
Define security posture for new and existing digital applications aligning with industry standards and compliance requirements.
Develop and enforce security assurance maturity models to continuously improve application security.
Drive security improvements across digital and enterprise applications to protect business functions and sensitive data.
Foster a proactive security culture within the organization enabling secure and resilient application development.
What will our ideal candidate bring to Fluence
Bachelors degree in computer science or related field. Equivalent work experience will be considered.
Professional certifications such as CISSP CSSLP or similar.
Core Product security and Software development background of 5 years.
Ability to articulate security requirements for build and delivery pipelines.
Experience in Threat Modeling and Security Architecture Reviews as per industry standards.
Experience working with energyrelated companies or national lab institutions is desirable.
Should have expertise in Microsoft Azure GCP and AWS to secure cloud applications and SaaS products.
Experience in Secure SDLC SAST SCA DAST Container Security and Penetration testing.
Experience in data security/governance initiatives in a highly regulated environment.
Continuously assess the application security maturity and build enhancement plans.
Soft skills excellent communication skills with the ability to work collaboratively with crossfunctional teams.