Senior Director, Cybersecurity Operating Office
Recruiting.com
Cyber Security
Senior Product Security Engineer
Navy Federal Credit Union
full-time
Posted on:
Location: Florida, Virginia • 🇺🇸 United States
Visit company websiteSalary
💰 $131,700 - $206,450 per year
Job Level
Senior
Tech Stack
CloudJavaMicroservicesPythonSDLC
About the role
- To embed security seamlessly into the product development lifecycle.
- Work with development and engineering teams across the enterprise to enhance the security of our applications through automation, security reviews, and DevSecOps best practices.
- Collaborate with NFCU teams and vendors to determine security requirements and support or automate security across all phases of product integration, operations, and maintenance to ensure a secure Navy Federal environment.
- Work under minimal supervision and use complete understanding of business needs and objectives to support projects that have impact on the achievement of operational goals.
- Advanced skill set and proficiency with procedures and techniques
Requirements
- Bachelor’s Degree in Computer Science or the equivalent combination of education, training or experience
- 5-7 years of experience in security engineering
- Complete knowledge and understanding of business area/specialization
- Advanced skill with application security and software development in one or more programming languages such as C#, Java, Python, etc.
- Experience with security tools such as SAST, DAST, IAST, SCA and other security tools
- Advanced knowledge of industry-standard security frameworks such as OWASP, NIST, BSIMM etc.
- Experience with CICD pipeline, security tools integration and secure SDLC
- Experience collaborating with cross functional engineering and product teams to scale secure SDLC
- Advanced knowledge of secure architecture and design patterns for Web, Mobile and Microservices
- Advanced knowledge of current and emerging threats and techniques for exploiting security vulnerabilities
- Advanced skill using methodologies and security testing tools for threat analysis of complex applications and services including threat modeling, software fuzzing, static and dynamic analysis
