Senior Cyber Security Architect
Recruiter
JLR
Listed on
29th November 2022
Location
Manchester
Type
Permanent
Start Date
2022-11-29
This job has now expired please search on the home page to find live IT Jobs.
A leading premium automotive business and leading to move towards electric autonomous vehicles.THE OPPORTUNITY
We are looking for someone who will help us realise our business vision for a resilient IoT platform that will provide our customers, suppliers and partners with seamless connected services delivered through an industry-leading global platform that will generate new income streams for our business and help drive down costs through the use of data analytics.
Our Security Architects work closely with stakeholders to define and evolve system security architectures that are secure by design. You will be a valued member of our Offboard Cyber Security Chapter reporting in to Offboard Security Architecture Chapter Lead, contributing to the strategic direction of the technology and solutions delivered.
As a Senior Security Architect, you will work in conjunction with solution architects, product owners, technical leads and embedded security champions to identify the security risks associated with our products using application security threat modelling. You will collaborate with stakeholders to identify secure architectures, best practices and requirements that enable us to deploy secure systems at scale. You will support our engineering teams through their security assurance journeys working to identify security assurance testing regimes that are aligned with our products.
WHAT TO EXPECT
This role sits within the software development centre for digital engineering in Manchester and would suit those who are technically minded; be that from a security background or those with a Technical Architect/Software Engineering background. We are looking for a self-starter, keen to work in a highly collaborative manner supporting our engineers and product teams as we deliver a connected data platform for the luxury vehicles of the future.
Some of our Security Architect's responsibilities include:
Providing consultation to product teams in security architecture and design, and conduct security reviews of new and existing products and services
Conducting and reviewing threat models to identify security risk
Continual collaboration with stakeholders with a view to being a key part of the product delivery teams' success
Maintaining strong knowledge of current security threats, mitigations and operational security best practices
Providing security training, outreach, and guidance to our internal development teams
Supporting the analysis of business requirements and their interpretation into security deliverables?
WHAT YOU'LL NEED
This is a senior role within our team, you will be guiding, coaching and supporting our engineering teams along their cyber security journey. As such a strong technical background, excellent communications skills and a desire to work collaboratively to influence technical decisions are a must.
Essential:
A background in software engineering, with good knowledge of DevSecOps
Strong knowledge of application security threat modelling and security risk management
Experience implementing SDLC process, technology, and automation in a DevOps environment; ideally making use of OWASP best practice
Experience of security architecture within agile delivery frameworks e.g. scaled agile or scrum
Experience with large-scale web applications and backend services, including API design, access management, authorization, authentication, data protection and encryption
Solid understanding of common application and infrastructure security vulnerabilities and mitigations?
Solid technical foundation (Computer Science / Engineering degree or equivalent) with a business-savvy mindset and an ability to translate technical vulnerabilities into business risks for senior leadership
Experience deploying global solutions in the cloud
Personal Profile
An individual with a customer first mindset who is easy to do business with and makes people feel special, driven to deliver experiences that are personalised, transparent and dependable
An individual, who works independently, is results driven, demonstrating tenacity, drive and perseverance with the ability to deliver operational plans in a complex, highly demanding environment.
A passion for continuous technical improvement
An individual with the capability to combine a short term, pragmatic focus with medium term planning
A resilient and enthusiastic who responds constructively to new ideas and inputs
A good communicator with the ability to clearly communicate complex ideas
An effective team player, actively develops and supports team members
The ability to challenge existing thinking in a positive way whilst building credibility and trust through experience and personal style
