Requirements
Master's degree in computer science or cyber security, or equivalent experience. Minimum 7+ years of experience in engineering, software development, or related fields. Minimum 5 years in a product security role (architect, penetration tester, or security engineer) in cloud and application environments. Strong knowledge of software technologies (C/C++, Java, .Net, Python). Experience with SAST, DAST, SCA, and penetration tests. Azure cloud, OS hardening using DISA STIGS and CIS benchmarks. Understanding of secure software development lifecycle, Agile methodologies, security by design principles, PKI, and OWASP Top 10. Experience with penetration test result analysis, threat modeling, and system security audits. Knowledge of security threats and vulnerabilities. Exposure to international privacy requirements.
Description
About The RoleWhat you will be doing:Work directly with product teams in building a security by design and by default mindset by defining a structured approach to security in line with the Application Security Program mandatesDevelop design patterns, and code guidelines that meet business security and system requirements in line with the risk assessments, policies, and proceduresBe a thought leader and help the wider organization drive security solutions implementation in-alignment with other stakeholdersDrive feature implementations in line with the architecture via designs, coding, reviews and tests. Perform Proof of Concept (POC) activities as necessaryLead DevSecOps implementation through technology, process and human upskilling including SAST, DAST, SCA, and penetration test results in collaboration with the developers.Review current software security control measures and implement security enhancements for multiple cloud-based productsParticipate in vulnerability investigations and become an extended arm to the Security Operation teamWhat You HaveMaster's degree in computer science or cyber security, a related field or equivalent demonstrated experience and knowledgeMinimum 7+ years of experience in engineering or software development or related fields.Minimum 5 years hands-on product security role either as an architect, penetration tester or security engineer in cloud and applicationStrong working knowledge ofsoftware technologies such as C/C++, Java, .Net, python, etc.Experience analyzing, using SAST, DAST, SCA and penetration tests.Azure cloudIOT and Operating system hardening using DISA STIGS and CIS benchmarkExperience ins secure software development or at least knowledge in secure coding practices and application security test report interpretation for various coding languages and multiple cloud servicesStrong knowledge of secure software development lifecycle and practices including Agile methodologies for software developmentUnderstanding of security by design principles and architecture level security conceptsSound understanding and experience in implementing security public key Infrastructure (PKI)),Experience implementing OWASP Top10 application security guidelines in cloud-based web applicationsExperienced in generating, defining, and reviewing penetration test results through knowledge of standard methodologies and tools including environmental configuration definition, security analysis, threat modeling, and system security auditsKnowledge of current and emerging security threats and techniques for exploiting security vulnerabilitiesExposure to international privacy requirements & cross-industry trendsRequirementsWe are looking for a Principal Product Security Engineer whom his primary responsibility will be to for design, build, test and implementing secure SDLC across the product development lifecycle.This role requires deep knowledge of building product security program from scratch which includes writing SOP, SWI, designing training for developers and gaining the trust of the product teams through hands-on engagement. A deep understanding of web-based secure code principles, and IOT security is a pre-requisite. Candidates should have experience in FDA and EU MDR submission process.About The CompanyAt AMD, we are dedicated to safeguarding our client against cyber threats. We recognize the distinct requirements and vulnerabilities of each enterprise, which is why we offer tailor-made solutions to shield your data and assets effectively.Our collaborative approach involves working closely with clients to devise a holistic cybersecurity strategy that harmonizes with their specific business objectives.