Staff Security Engineer

Job Description:

• Provide technical leadership and execution for Delinea’s Product Security Program
• Design the overall strategy and multi-year roadmaps for the Product Security Program
• Perform secure design reviews, threat modeling, and product risk assessments
• Provide Product Security consulting services
• Advise on secure design of Delinea products and services
• Collaborate with Enterprise Architecture, Development, DevOps, and Cloud engineering teams
• Participate in security audits and respond to customer security inquiries
• Implement organizational policies and standards for product and cloud security
• Partner with teams to integrate cloud security best practices
• Provide leadership as a security thought leader across Delinea’s product offerings
• Influence security architecture adoption in product strategy and roadmaps
• Expand and mature Delinea’s S-SDLC program
• Develop baseline cloud, container, application, and infrastructure security standards
• Integrate security standards and testing into CI/CD pipelines
• Automate operational activities maintaining product and cloud security infrastructure
• Respond to, resolve, or escalate security incidents
• Mentor and guide Product Security team members
• Stay current on the threat landscape, technologies, compliance requirements, standards, and industry trends
• Report to the Sr. Director of Product Security

Requirements:

• Bachelor’s degree in Computer Science, Information Security, similar related field, or equivalent experience
• Twelve (12) years of professional work experience in Cybersecurity
• Minimum of seven years in a Product Security role including Security Architecture, Threat Modeling, Secure Design, AppSec tooling, etc.
• Knowledge of the current Product Security threat landscape and industry best practices
• Experience performing Threat Modeling and Product Security design reviews and incorporating them into SSDLC processes
• Experience with cloud security
• Experience with cryptography
• Experience with secure design reviews and threat modeling
• Experience with SaaS multi-tenant product architecture
• Experience with REST APIs
• Experience with containers such as Docker or Kubernetes
• Experience integrating security testing tools into development pipelines
• Experience with defect tracking tools such as Jira, Bugzilla, or ServiceNow
• Experience with source code management tools such as ADO, GitLab, or GitHub
• Experience with application security testing tools such as SAST, DAST, IAST, or SCA
• Strong leadership, communication, interpersonal, analytical, and prioritization skills
• Ability to describe technical security issues in plain language
• Experience leveraging AI capabilities for Product Security tasks
• Understanding of cybersecurity frameworks, risk management principles, and industry standards such as NIST, ISO 27001, CIS, or GDPR
• Understanding of container security, serverless security, network security, application security, and access management
• Software engineering and/or development experience
• Cybersecurity certifications such as CISSP, CSSLP, or CISM
• Proficiency with Azure and AWS
• Ability to complete a comprehensive criminal background check and verification of education and employment upon conditional offer

Benefits:

• Equity
• Performance-based bonus plans or role-based incentive programs
• Healthcare insurance
• Pension/retirement matching
• Comprehensive life insurance
• Employee assistance program
• Time off plans
• Paid company holidays
• Career progression opportunities
• Meaningful work and a culture of innovation