Senior Sofware Security Engineer

Roles and Responsibilities:

• Responsible for designing, developing and recommending integrated software security solutions that will ensure proprietary/confidential data and systems are protected
• Conduct security risk analysis of business and technology projects. Communicate areas of risk, propose mitigation plans or risk acceptance criteria to Information Security Management.
• Participate as needed in documenting software security standards, guidelines, policies and procedures
• Mentor Junior Members of the Information Security Team
• Perform other duties as assigned
• Will incorporate necessary software security practices into the SDL
• Act as primary Software Security resource on assigned projects
• Will interpret security results gathered from QA and software security analysts and determine best course of action.
• Creates reusable software security artefacts
• Acts as primary interface with Project Management Office and Internal Audit with respect to software security matters
• Delivery of Software Security awareness training

First-hand familiarity with security assessment tools:

• SAST: Fortify's SCA, Ounce, similar
• DAST: Cenzic's Hailstorm, AppScan, similar

Experience assessing, applying, or building security software such as:

• Securing open-source software
• Writing security controls for project teams
• Internal API-toolkits, or OWASP ESAPI
• Experience acting as development lead and primary software Engineer
• Appropriate security credentials
• Domain experience
• Project experience
• Experience with interpreting policies and appropriately applying them to projects
• Experience writing technology-specific best practices