Engineering Division – Dallas - Associate, Security Engineering - 10431284

About the role

Lead and support the implementation of static and dynamic analysis, as well as security awareness initiatives across all stages of the secure software development lifecycle (S-SDLC). Drive the integration and adoption of embedded application security controls within the Software Development Life Cycle (SDLC).

Responsibilities

• Interface with Business Units (BU) to help remediate issues identified by automated tools.
• Develop, enhance, support and maintain the Firm’s secure software development lifecycle (S-SDLC) solutions in support of its global businesses.
• Design and implement high-quality, scalable and thoughtful technology solutions leveraging both internal and open-source services.
• Assist in requirements gathering, user story refinement, development, testing (unit, integration and regression), User Acceptance Testing (UAT) and deployment.
• Work with internal teams to help develop solution designs.
• Identify new external technologies that can be used to transform our financial businesses and internal platforms in innovative and disruptive ways.
• Work in all phases of the Secure Software Development Lifecycle (SDLC) to meet internal and regulatory requirements.
• Design, implement and maintain robust testing suites to enable secure, complete, and scalable solutions across our business lines.

Requirements

Master’s degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and one (1) year of experience in the job offered or a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and three (3) years of experience in the job offered or a related role.

Qualifications

Prior experience must include one (1) year (with a Master’s degree) or three (3) years (with a Bachelor’s degree) with:

• Application and infrastructure architecture and security (on premise and Cloud).
• Application security best practices including OWASP and CWE.
• Application security vulnerabilities and controls to remediate risks.
• Assessing and mitigating software security threat vectors, attack surface analysis, source code reviews, or vulnerability assessments.
• Working in shift left environment to help embed security in Design phase to implement security controls within system architecture.
• Conducting infrastructure or application security risk assessments.