Software Security Engineer/Architect

American Fidelity • Oklahoma City, OK

1d

About The Position

This role provides deep expertise on secure coding practices, offering continuing education to the software department through various formats like lunch n learns, formal classes, and secure coding courses. The position involves evaluating, implementing, testing, and administering security vulnerability and penetration testing tools, interpreting test results, and collaborating with project teams for remediation. Additionally, it requires working with project teams to provide architectures and engineering designs for new software solutions that mitigate security vulnerabilities, and performing due diligence on vendor-supported software from a software security perspective. The role also includes performing code reviews, assisting and training developers on identifying and remediating code vulnerabilities, conducting architecture and design reviews, and participating in incident response activities and audits related to secure software development practices.

Requirements

• Deep expertise on secure coding practices.
• Ability to evaluate, implement, test, and administer security vulnerability and penetration testing tools.
• Ability to interpret results from tests and collaborate with project teams for remediation.
• Ability to provide architectures and engineering designs for new software solutions that help mitigate possible security vulnerabilities.
• Ability to perform due diligence from a software security aspect on any vendor supported software.
• Ability to perform code reviews.
• Ability to collaborate with, assist, and train developers on determining security vulnerabilities in code.
• Ability to perform architecture and design reviews from a security perspective.
• Ability to provide architecture diagrams and document design patterns for new software solutions.
• Ability to participate in incident response activities.
• Ability to collaborate with IT Governance, Risk, & Compliance area and Internal Audit to conduct audits on secure software development practices.

Responsibilities

• Evaluate, implement, test, and administer security vulnerability and penetration testing tools. Interpret results from tests and collaborate with project teams, security, risk management, compliance, internal audit, privacy officer, and other interested parties to remediate any vulnerabilities found.
• Regularly provide continuing education to the software department regarding secure coding practices in the form of lunch n learns, formal classes, secure coding courses, and team collaboration sessions. Keep abreast and keep software department informed of current security trends, new vulnerabilities or breaches in the industry, secure coding techniques, and new tools to help mitigate vulnerabilities. Document key components for writing secure code.
• Regularly perform code reviews for all project teams to help improve software security. Collaborate with, assist, and train developers on determining security vulnerabilities in code, and make changes to the code as necessary to remediate vulnerabilities. Perform architecture and design reviews from a security perspective on all new systems projects and on projects containing architecturally significant changes.
• Provide architecture diagrams and document design patterns for new software solutions that help mitigate possible security vulnerabilities. Participate in any divisional or departmental discussions related to defining or building new secure infrastructures or data designs.
• Perform due diligence from a software security aspect on any vendor supported software being considered by the organization.
• Participate in incident response activities to assist with identification, exposure, and mitigation of potential breaches. Additionally collaborate with IT Governance, Risk, & Compliance area and Internal Audit to conduct audits on secure software development practices, and to answer audit questions on software security from internal and external auditors.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed