List required education, prior experience, technical knowledge and skills, and certifications. Also indicate if there are specific competencies that are critical to success in this job. NOTE: The ten core competencies in the Responsibility Framework are applicable to all jobs.
Degree Preferred:
Bachelor Degree
Fields of Study:
Information Technology, Computer Systems Analysis, Management Information Systems, Computer Applications, Computer Engineering, Computer Programming
Certification(s):
OSCP, CISSP, ITIL, OSCE, OSWE, CEH, or GWAPT Certifications are a major plus
Skills:
Required:
The ideal candidate would be 50% programmer and 50% hacker. Examples of qualifications that resemble this profile are as follows
3-5 years’ experience in a software development field such as Software Developer, Architect, Software Quality Assurance, or Application Security Engineer
Highly proficient in at least one of the following development languages: C#, C++, Java, .NET, Node.js, or Python
Possess a strong understanding of application architectural patterns, such as MVC, Microservices, Event-driven etc.
Creative, organized, responsive, and highly thorough problem solver
Possess strong business acumen with ability to work with application development, QA and security teams
Possess a restlessness or desire to break into things
Knowledge of the OWASP Top 10
Strong self-starter who has the ability to operate independently
Has solid understanding and experience with establishing software development policies across an organization
Excellent oral/written presentation skills with ability to communicate effectively with senior executive leadership; proficiency in preparation of presentations, analytical reports, and documents regarding program operational status, achievement and performance
Knowledge of effective controls for Application Security, Cloud & Services Hosting, Identity and Access Management, Data Protection, Borderless Connectivity, Endpoint Security, and Cyber Security Operations
Conversant with ISO 27002:2005/2013 information security standard
Demonstrating architectural domain knowledge including cloud application architecture and container-based deployment
Partnering with and enabling the development process to assure that security requirements are met while allowing for maximum speed to market
Supporting a leading edge development effort by developing standardized reusable security frameworks
Collaborating with multiple stakeholders across functional and technical skill sets
Aligning business requirements to complex security architecture frameworks
Managing multiple security assessments and changing priorities, simultaneously
Preferred:
Understanding and Passion for Agile/XP/Scrum/Kanban
Understanding of Test Driven Development built on User Stories
Understanding of Continuous Integration/Testing/Delivery/CI/CD
Familiarity with cloud architecture and services, such as AWS.
Familiarity with Metasploit, Burp Suite, Fuzzing, and Jenkins is preferred.
Familiarity with code reviews and penetration testing preferred.
SECTION IV: Travel Requirements & Special Circumstances
(e.g., percentage of travel time, frequency of expected site visits, whether virtual work arrangements are possible, etc.)