Principal/Senior Staff Security Engineer - (Product Security)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Guidewire Software, so some details may not match this job. The employer's own page has the real description.

Overview

The Principal/Senior Staff Security Engineer (Product Security) at Guidewire Software will play a pivotal role in safeguarding our products and services from security threats. This position requires a deep understanding of security frameworks, best practices, and the ability to work collaboratively across multiple teams. The successful candidate will lead efforts in assessment, design, and implementation of security measures throughout the product lifecycle, ensuring the security of applications and infrastructure while promoting a culture of security consciousness within the organization.

Job Responsibilities

• Lead security assessments for product designs, architecture, and implementations.
• Design and develop security tools and frameworks for application and product security.
• Collaborate with product teams to integrate security practices into the Agile development processes.
• Identify security vulnerabilities and lead remediation efforts across products and services.
• Provide expert guidance and training on security best practices to technical teams.
• Help in defining security policies, standards, and procedures to ensure compliance with relevant regulations.
• Stay abreast of the latest security threats and technologies to continuously improve security measures.
• Participate in incident response planning and execution.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 10+ years of experience in security engineering or application security.
• Strong knowledge of security frameworks (e.g., NIST, OWASP, ISO 27001) and regulatory compliance.
• Experience with secure software development lifecycle (SDLC) methodologies.
• Proficient in scripting and programming languages such as Python, Java, or C#.
• Hands-on experience with security tools (e.g., static analysis, dynamic analysis, vulnerability scanners).
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration abilities to work effectively in cross-functional teams.

Technologies & Tools

The Principal/Senior Staff Security Engineer will utilize a variety of technologies and tools in their role. This includes application security testing tools, vulnerability management systems, secure coding frameworks, SIEM solutions, and various cloud and on-premises security configurations. Familiarity with DevSecOps processes and tools to automate security measures within CI/CD pipelines is also essential.

Ideal Candidates

Ideal candidates for this position will possess a proactive and strategic mindset towards security challenges. They will be detail-oriented and tenacious in identifying vulnerabilities while balancing the need for innovation and speed in product development. Furthermore, strong interpersonal skills are critical for facilitating effective communication among technical and non-technical stakeholders, creating a collective responsibility for security across the organization.