Specialist Product Engineer (Security)

Specialist Product Engineer (Software Engineer with a focus on Security)

Minimum requirements: 

• Preferably proficient in either Java or C#
• DevOps
• CI/CD
• Agile
• Understanding of Security platform (pref)
• Front End tools (React or Angular or JavaScript)
• Data oriented, will be dealing with reams of data

Accountabilities:

• Develop reference implementations to prove and demonstrate use of security components for product
• engineering teams.
• Develop components to automate security testing within build processes.
• Assist product engineering teams with implementation of security components.
• Assess security tools and integrate tools where needed.
• Configure new and existing security tools to support security testing activities.
• Document security patterns relevant to product engineering teams.

Responsibilities: 

• Document guidelines aligned to security standards.
• Consult with teams in security code reviews where needed.
• Develop skill in Thread Modelling and assist others with the process.
• Develop security training and guidance to internal development teams.
• Work across organisational structures where required to achieve the stated goals.
• Engage in learning and skills development focused on security, including achieving relevant certifications
• and informal security skills development through Capture The Flag exercises.
• Assist with organisation of the Security Champions program.
• Understand the security environment within the bank that drives the requirements for security tools,
• security testing capabilities and policies and standards that apply to our engineering activities.
• Keep informed on what is going on in the organisation e.g. coding standards, patterns & practices,
• ongoing organisational security initiatives, current incidents and risks.
• Triage and handle security issues.
• Participate in security architecture reviews.