Product Security Cybersecurity Architecture

Job responsibilities

• Architect and assess data security controls across cloud and hybrid platforms (e.g. Databricks Snowflake AWS GCP) including storage compute analytics and streaming services.
• Engages technical teams and business stakeholders to discuss and propose technical approaches to meet current and future cybersecurity needs
• Defines the technical target state of their cybersecurity product and drives achievement of the strategy
• Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall cybersecurity of software applications and systems
• Leads evaluation sessions with external vendors startups and internal teams to drive continuous improvement and assess cybersecurity design and technical credentials for use in existing systems and architecture
• Leads communities of practice to drive awareness and use of new and leading-edge cybersecurity technologies
• Adds to team culture of diversity opportunity inclusion and respect

Required qualifications capabilities and skills

• Formal training or certification with 5 years experience in Data Technologies.
• Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls
• Advanced in one or more programming languages. Proficiency in automation and continuous delivery methods
• Proficiency in all aspects of the Software Development Life Cycle
• Advanced understanding of agile methodologies such as continuous integration and delivery application resiliency and security
• Demonstrated proficiency in software applications and technical processes within a technical discipline (e.g. public cloud artificial intelligence machine learning mobile etc.)

• Practical cloud native experience.

  Deep knowledge of one or more software and applications

• Ability to evaluate current and emerging technologies to recommend the best solutions for the future state architecture

• Experience effectively communicating with senior business leaders

• Proven experience in data security architecture (or security architecture with substantial data platform scope) with a track record of delivering enterprise-scale controls.

• Strong knowledge of:

  Data security concepts (classification access controls encryption tokenization/masking DLP retention secure sharing)

• Cloud security architecture for data services (storage analytics messaging/streaming).

  Identity and access management patterns (federation service identities least privilege ABAC/RBAC)

• Experience performing threat modeling security design reviews and risk assessments for complex data flows and distributed systems.

  Working familiarity with secure engineering practices and common vulnerabilities (e.g. OWASP) as they apply to data APIs and services.

  Proficiency or strong working knowledge in one or more languages (e.g. Python Java) and Infrastructure-as-Code concepts.

• Familiarity with security and privacy frameworks/regulations (e.g. NIST GDPR HIPAAwhere applicable).

  Preferred Certifications (AWS Certified Solutions Architect Databricks Snowflake Data Engineering)