Senior Director, Product Security and Resilience
Dun & Bradstreet
CloudSDLC
Staff Product Security Architect
Fastly
full-time
Posted on:
Origin: • 🇺🇸 United States • California, Colorado, New York
Visit company websiteSalary
💰 $211,370 - $253,664 per year
Job Level
Lead
Tech Stack
CloudKubernetesLinuxSDLC
About the role
- As a Staff Product Security Architect at Fastly you will help ensure we provide a secure edge for one of the biggest online platforms in the world, handling extensive amounts of traffic at very low latency. Fastly’s Security Architecture Team fosters security throughout all areas of Fastly’s applications and infrastructure. Fastly believes that security is everyone’s responsibility and you will be empowering all of Fastly to live up to that responsibility. Qualified candidates will excel at analyzing the design of our software and implementations, and will show an aptitude for discovering complex security issues.
- In this role, you will enhance the security of Fastly’s content delivery and compute products by working closely with engineering and product teams to integrate security into the design and development of Fastly products.
- Perform secure architecture and design reviews of cloud-based products and collaborate with engineering and product teams to integrate secure-by-design principles into engineering builds.
- Conduct thorough security assessments of products developed by our content delivery network and compute platform product lines to identify security threats to Fastly and define tactical and strategic mitigation plans to assist with remediation.
- Perform secure code and configuration reviews as part of the product development lifecycle and provide recommendations that strengthen Fastly’s security posture.
- Influence product design paradigms to incorporate security best practices and drive requirements for security into the release cycle.
- Maintain a clear view of the overall product development roadmap and associated product lifecycle to ensure security is appropriately incorporated throughout.
- Become a domain expert in the content delivery network (CDN) and compute platform products and represent that knowledge with prospects, customers, and auditors.
- Research and understand new threats and attack vectors that impact Fastly and work with product owners to design appropriate prevention, detection and remediation initiatives.
- Involvement in Fastly’s Secure SDLC, focusing on both collaborative hands-on design work and training initiatives across the company.
- Influence Fastly’s security strategy by leveraging the collective strength of the security team and articulating the capabilities needed to effectively manage cyber threats.
Requirements
- 7+ years of relevant experience and a Bachelor's degree in Computer Science or equivalent.
- Proven experience in securing multi-tenant compute services, proxy servers, Kubernetes and modern APIs.
- Extensive experience performing threat modeling, secure design reviews and implementing controls to mitigate security threats for new and existing cloud-based products.
- Deep understanding of authorization, authentication and encryption protocols.
- Experience with Linux administration at scale, associated intrusion/manipulation techniques, and standard methodologies for system hardening and process isolation.
- Working knowledge of common web and container based vulnerabilities.
- Strong grasp at all layers of the information security stack including hands-on security engineering.
- Strong analytical and problem-solving skills, with the ability to analyze complex security issues and recommend effective solutions.
- Excellent communication and interpersonal skills, with the ability to collaborate effectively with both technical and non-technical stakeholders.
Similar jobs on JobTailor
Senior Director, Product Security and Resilience (R-18339)
Dun & Bradstreet
CloudSDLC
Director, Product Security
Unqork
AWSAzureCloudGoogle Cloud PlatformMicroservicesSDLC
Information Security Engineer
Vail Systems
CloudCyber SecurityKubernetesLinuxPython
AI Architect, Pre-Sales
HiddenLayer
CloudCyber SecurityKubernetesLinuxPython