Software Security Architect 4 (Cloud Security)

Overview

Hyland Software is widely known as a great company to work for and a great company to do business with. Being a leader in providing software solution for managing content, processes, and cases for organizations across the globe we enabled more than 20,000 organizations to digitalize their workplaces and transform their operations.

Currently we are looking for the position of Software Security Architect 4

The Software Security Architect 4 plays a critical role in safeguarding the company's products and services by ensuring secure design rigorous testing and proactive vulnerability management. This position will work closely to promote secure coding practices and identify potential risks.

• Define and implement education programs that ensure software and test engineers understand secure software development practices and how to identify insecure code. Regularly monitor the effectiveness of these programs and update as needed.
• Review software designs and test plans on the company's software to ensure they meet established security standards.
• Maintain threat models for all company products and services ensuring they are current and comprehensive.
• Lead the definition and review of security controls in products and services to align with the latest threat models.
• Develop review and maintain up-to-date documentation on all security controls used across company products and services.
• Ensure that all tools used in the development of products are secure and meet industry standards.
• Regularly review and validate the effectiveness of security verification tools ensuring they are consistently applied.
• Foster and participate in a community of security best practices within the company promoting a culture of security.
• Promptly assess and prioritize remediation for both internally and externally discovered vulnerabilities within the company's software.
• Assess and prioritize remediation for vulnerabilities in third-party software used within company products coordinating fixes as needed.
• Serve as the primary contact for security-related questions ensuring all employees know where to direct security inquiries.
• Operate as a trusted advisor on issues and trends; provide general consulting services leveraging expertise and significant best practice knowledge.
• Operate as an innovative thought leader; contribute significantly to the overall growth and quality of the department through knowledge sharing and coaching on current best practices and market trends.
• Mentor coach train and provide feedback to other team members; provide feedback to leadership on abilities of team.

• Bachelor's degree in Computer Science or related field
• Must-have technical skills  - Cloud security, experience with Compliance efforts
• Programming languages - Experience in an object oriented language is preferred.  AWS would be great too.
• Knowledge of Security tools or frameworks - Experience with tools for SAST, DAST, SCA
• Familiarity with SOC 2, GDPR, and NIST frameworks. While deep expertise is not mandatory, understanding these standards is essential for effective collaboration
• This role will be leading teams through these audit by collaborating with the Compliance team and working with the Dev teams
• Minimum of 8 years of progressive security architecture experience; preferably within a professional services company or similar environment working with startups and large security mature companies
• Minimum of 8 years of application security experience designing building or testing web and API-based architectures
• 3+ years of experience working with stakeholders across many functions
• Understanding of security vulnerabilities attacker exploit techniques and methods for remediation of such
• Capacity and tolerance for extreme context switching and interruptions while remaining productive and able to provide effective safe guidance
• Experience communicating technical concepts to a non-technical audience
• Prior working experience in or with a Software Development Team
• Demonstrated experience in areas such as system security network and/or application security experience
• Understanding of best practices in one or more security engineering specialties: secure development cryptography network security security operations systems security policy and incident response
• Experience developing and interpreting security compliance standards and guidance
• Scripting skills (e.g. Python C C++ Java Ruby or PowerShell)
• Microsoft Windows and Office proficient
• Excellent oral and written communications skills that demonstrate a professional demeanor and the ability to interact with executive presence
• Excellent organizational multi-tasking and time management skills
• Excellent collaboration skills applied successfully within team as well as with all levels of employees in other areas
• Excellent Microsoft Excel skills
• Excellent leadership sound judgement and business acumen skills
• Excellent facilitation and project management skill
• Excellent interpersonal skills; able to maintain solid rapport with team members as well as maintain professionalism with those outside of department
• Excellent data gathering interviewing and analytical/problem solving skills
• Excellent critical thinking and problem solving skills
• Excellent ability to use original thinking to translate goals into the implementation of new ideas and design solutions
• Self-motivated with the ability to manage projects to completion independently
• Able to thrive in a fast paced deadline driven environment
• Excellent attention to detail
• Demonstrated ability to influence motivate and mobilize team members and business partners
• Excellent ability to develop and use engaging informative and compelling presentation methodologies
• Excellent ability to handle sensitive information with discretion and tact
• Excellent ability to establish rapport and gain the trust of others; effective at gaining consensus
• Ability to work independently and in a team environment
• Ability to coach mentor and provide feedback to team members in a timely manner
• Ability to provide guidance and support to developing team members
• Up to 5% travel time required

Hyland’s Offering

We’re proud of our culture and take employee engagement seriously. By listening to employees’ feedback, we’re able to provide meaningful benefits and programs to our workforce.

• Learning & Development- development budget (used for certifications, conferences etc..), tuition assistance program, 4,000+ self-paced online courses, instructor-led webinars, mentorship programs, structured on-boarding experience full of trainings, dedicated Learning & Development department supporting our employees.
• R&D focus – cutting edge technologies, constant modernization efforts, dynamic and innovative environment, dedicated R&D Education Services department to help you grow.
• Work-life balance culture– flexible work environment and working hours (we are working in task-based system!), possibility to work from home, we value trust, and we believe efficiency does not depend on your actual location, however we would like to spend time together in the office! 
• Well-being- private medical healthcare, life insurance, gym reimbursement.
• Community Engagement– Volunteer time off (24h/year).
• Diversity & Inclusion– employee resource groups, inclusion benefits and policies
• Niceties & Events– snacks and beverages, employee referral program,  birthday, baby gifts and employee programs

 If you would like to join the company where honesty, integrity and fairness lie in the bottom of values, where people are truly passionate about technology and dedicated to their work – connect with us!

We are committed to a policy of Equal Employment Opportunity and will not discriminate against an applicant or employee on the basis of race, color, religion, creed, national origin or ancestry, sex, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, marital status, gender identity or any other legally recognized protected basis under federal, state or local laws, regulations or ordinances. The information collected by this application is solely to determine suitability for employment, verify identity and maintain employment statistics on applicants.