Product Security Engineer
The Judge Group Inc.

Job Info

---

Location: Ashburn, VA
Description: The Judge Group is currently seeking a Product Security Engineer. For immediate consideration, please email your resume to rkissinger@judge.com.
- Robbie Kissinger

This is a one year contracting opportunity.

As a product security engineer, you will work to conduct security assessments on both Consumer and Business products and solutions. You will help to create, define, and implement security controls and tooling in conjunction with product development teams and product owners. The appropriate candidate will manage multiple projects with a degree of impact and complexity that must be carefully controlled to support the internal business unit security requirements.

The candidate will also work in conjunction with security stakeholders in other areas of the business and make decisions and help lead initiatives to ensure timely delivery of security solutions that support business objectives. The successful candidate will also manage work that involves coordination with multiple organizations and is the focal point within the group.

The candidate will often work with little or no supervision, and will regularly be given high-level directives and allowed to work independently to satisfy the requirements.

Responsibilities Include:

• Help implement Secure Software Development Lifecycle (SSDLC) practices and use automation where possible
• Work with the product teams to perform security design/code reviews and vulnerability assessment
• Provide security guidance to Engineering and Product teams.
• Build threat models and conduct risk assessments for new features and services.
• Create application threat models and provide guidance on effective countermeasures
• Contribute to security architecture and assist in building and rolling out processes for secure code development and deployment involving truly cutting edge technology
• Provide subject matter expertise on encryption, security controls, and secure design and programming practices across the Technology organization
• Contribute to security policy, standards, and guidelines related to Information Security
• Evaluate and operationalize new technologies for securing the organization
• Train and mentor Security Champions throughout the development
• Share thought leadership in the product and application security space
• Create security user stories and security test cases for products that are tailored to the product attributes and technology
• Support and advise product owner and product development teams by ensuring technical and architectural feasibility, readiness and compliance.
• Experience with secure SDLC, governance and compliance for PCI, FedRAMP and NIST

Requirements:

• Bachelor's degree in a relevant field (Computer Science, Software Engineer, Security, or others) OR an equivalent combination of education, training, and experience
• 4+ years of hands-on technical experience such as in application development or security
• Minimum of 5 years of professional experience with any combination of at least 3 technical disciplines, including the following: cloud security, application security, mobile security, secure development methodologies, software development and coding.
• Minimum 3 years of experience experience building or reviewing threat models
• Minimum 4 years of experience experience with conducting security assessments
• Knowledge of application security vulnerabilities, secure coding, and countermeasures
• Written and verbal skills for communicating security concepts and solutions
• Ability to prioritize between and execute on multiple work streams
• Experience with application programming and the overall software development life cycle
• Excellent organizational and interpersonal skills

Contact: rkissinger@judge.com

This job and many more are available through The Judge Group. Find us on the web at www.judge.com

This job has expired.