Product Security Architect

Job Description

Key Responsibilities: 

• Define, Architect and Assess software components, including firmware, to meet the organization's requirements for security. 

• Develop strategies for secure storage, secure boot to cloud onboarding, key management, and cryptographic operations. 

• Experience in designing, Crypto accelerators (Advanced Encryption Standard (AES), Secure Hash Algorithm (SHA) 

• Deep understanding of secure software development, embedded systems, and firmware design principles. 

• Identify potential security risks and vulnerabilities related to products. 

• Understanding & experience of various application security principles, techniques, & tools including threat modeling and security assessments to proactively address security concerns. 

• Preparing detailed documentation of software, firmware, security architecture, design, best practices, and implementation 

• Provide training and guidance to development teams and stakeholders. 

• Collaborate with cross-functional teams, including software developers, system architects, and product managers, vendors, and partners to ensure security and memory requirements are met. 

• Stay informed about emerging software and security technologies, innovations and propose improvements to software designs. Contribute for development of secure, high performance systems that protect sensitive data and ensure the reliability of organization's products and services. 

• 

• Investigate and resolve complex software and firmware issues, working closely with development teams and vendors to identify root causes. 

• Qualifications: 

Preference for a Bachelor's or Master's degree in electronics engineering, but not required. Familiarity in hardware description languages would be beneficial (e.g., VHDL, Verilog) Proficiency with software and firmware development tools and methodologies, programming languages Excellent communication, leadership, and teamwork skills & problem solving skills Ability to work in a fast-paced and collaborative environment. Experience as a DevOps Engineer; CI/CD understanding, Strong understanding of source code 

control/repositories. Good knowledge of Scripting language Must be familiar with security policies, standards, & best cloud practices Good Understanding of Cloud-based product engineering, Automation, & troubleshooting General knowledge and familiarity with various secure product development techniques and related tools (i.e. SAST, DAST, SCA, PenTest, etc.) Strong Application Security knowledge and experience is highly recommended