Lead Cyber Security Steward (Technology, Remote)

Job summary

This role involves bridging the gap between security and engineering within a large team of engineers, focusing on enhancing the security posture of products through collaboration and influence rather than authority.

Qualifications

• Extensive knowledge of secure software development practices, including secure coding and API design.
• Experience with security tools such as SAST/DAST and familiarity with tools like SonarQube and Snyk.
• Proficient in conducting threat modeling workshops and integrating security into design reviews.
• Strong understanding of cloud security principles across platforms like AWS and Azure.
• Familiarity with modern programming languages such as TypeScript and Python, as well as CI/CD practices.
• Knowledge of security architecture patterns and governance frameworks.

Responsibilities

• Collaborate with the Digital Security team to foster a trust-based partnership and coordinate security efforts across product teams.
• Provide updates to engineering leadership on security progress and challenges, ensuring transparency.
• Review code and conduct threat modeling to guide teams towards secure design outcomes.
• Embed security practices into engineering workflows, including CI/CD integration.
• Lead informal security discussions and workshops to promote a culture of security awareness.

Skills

• Strong communication skills to translate cyber risks into understandable terms for engineers.
• High emotional intelligence to build relationships and lead through influence.
• Problem-solving mindset with the ability to adapt to changing circumstances.
• Resilience and composure in high-pressure situations.

Education

• Relevant technical degree or equivalent experience in cybersecurity or software engineering.

Tools

• Familiarity with security tools and practices, including CI/CD pipelines and policy-as-code.