Software Security Engineer/Architect

About the Role

This position provides deep expertise in secure coding practices and plays a key role in educating the software department, evaluating security tools, and ensuring the security of software solutions and vendor-supported software.

Responsibilities

• Provide continuing education to the software department on secure coding practices through lunch-and-learns, formal classes, secure coding courses, and team collaboration sessions.
• Evaluate, implement, test, and administer security vulnerability and penetration testing tools; interpret results and collaborate with project teams, security, risk management, compliance, internal audit, and other stakeholders to remediate vulnerabilities.
• Perform code reviews for all project teams to identify and remediate security vulnerabilities, and train developers on secure coding practices.
• Conduct architecture and design reviews from a security perspective for new systems projects and projects with architecturally significant changes.
• Provide architecture diagrams and document design patterns for new software solutions to mitigate security vulnerabilities.
• Participate in discussions related to defining or building new secure infrastructures or data designs.
• Perform due diligence on vendor-supported software from a software security perspective.
• Participate in incident response activities to assist with identification, exposure, and mitigation of potential breaches.
• Collaborate with IT Governance, Risk & Compliance, and Internal Audit to conduct audits on secure software development practices and address audit questions on software security.
• Stay current on security trends, new vulnerabilities, breaches, secure coding techniques, and tools to mitigate vulnerabilities; share updates with the software department.
• Document key components for writing secure code.