Product Security Lead

HOW YOU WILL CONTRIBUTE AND WHAT YOU WILL LEARN

• Handle security and privacy aspects of CSCF product.
• Able to understand telecom security topics and do impact analysis on products / feature areas.
• Interface with Customer teams, Product management and connect well internally with feature teams
• Contribute to R&D improvements from product security point of view.
• Handle/manage SOC, Threat & Risk analysis for a product, conduct security threat assessments, identify vulnerabilities, and develop mitigation strategies.
• Perform risk assessments on existing and new software products.
• Guide development teams in implementing secure coding practices, secure design principles, and code review processes.
• Develop tools and frameworks to automate security testing in CI/CD pipelines.

KEY SKILLS AND EXPERIENCE

You have:

• 9+ years of experience in software development or testing within Telecommunications Networks, with expertise in cloud-native design and development.
• Hands on experience with any vulnerability management tool (Ex, VAMS)
• Involved with Security tests (Black duck hub, Tenable, Codenomicon, Malware, NMAP, Net Sparker, DOS/DDOS attack, etc) and report analysis.
• Design for Security and privacy kept in mind. Ensure that Design for Security & Privacy methodology
• Working knowledge on secure protocols (TLS/DTLS/SSH ), Encryption methodology, Ciphers etc.

It would be nice if you also had:

• Knowledge on cloud, containerization and related security aspects
• Knowledge about the security architecture of the product.
• Any Certification on Security Management is an added advantage
• Exposure to SAFe agile methodologies will be a plus.