Principal Engineer - Product Security

October 31

Apply Now

Receive Emails with Similar Jobs

FICO

WebsiteLinkedInAll Job Openings

Predictive Analytics • Decision Management Tools and Applications • Scores • Consultancy • B2B Enterprise Software

1001 - 5000 employees

Founded 1956

💸 Finance

🤖 Artificial Intelligence

☁️ SaaS

Description

• Collaborate between Cybersecurity, DevOps, and Development teams. • Construct contextual security requirements for vendor tools. • Develop secure onboarding guidance for system administrators and users. • Design and implement AWS based solutions using Terraform. • Participate in security review and threat modeling exercises. • Provide technical guidance to development teams on security best practices. • Integrate Application and DevOps processes with CI/CD pipelines. • Build CI/CD pipelines with Jenkins MPL and GitHub Actions. • Leverage orchestration systems including Docker and Kubernetes. • Evaluate and on-board security tools into the Security DevOps lifecycle. • Remediate code- and dependency-level security findings. • Introduce and enhance Continuous Monitoring for security services. • Evaluate the stability, compatibility, scalability, and performance of software products. • Contribute feature enhancements to Cybersecurity tools. • Drive continuous improvement to Security DevOps pipelines.

Requirements

• Strong knowledge of programming, architecture, CI/CD, and automation. • Solid experience with AWS API, EKS, and Terraform. • Strong understanding and hands-on experience building CI/CD ecosystems. • Extensive architectural understanding of cloud security, Kubernetes, cloud-native computing, and microservices. • Demonstrated ability to evaluate complex projects and articulate secure design requirements. • Direct experience with ArgoCD, Crossplane, Akuity, Upbound Spaces, and Solo.io preferred. • Developer-level experience with Java and Golang preferred. • Direct experience with Artifactory, Backstage, Buf, and MongoDB preferred. • Experience within compliance frameworks (PCI 4, SOC 2, ISO 27001) is a plus. • Knowledge of Security Tools (DAST, SAST, SCA, IAST, IaC, etc.) is a plus. • Experience leading or participating in threat modeling and security reviews is a plus. • Bachelor/Master's degree in computer science or related discipline, or relevant experience.

Benefits

• An inclusive culture reflecting core values: Act Like an Owner, Delight Our Customers, and Earn the Respect of Others. • The opportunity to make an impact and develop professionally. • Highly competitive compensation, benefits, and rewards programs. • An engaging, people-first work environment with work/life balance, employee resource groups, and social events.