Security Product Architect

Mission

For work at one of our clients, we are looking for a Product Security Architect who will take care of the compliance and operation aspects, ensuring that digital products are resilient to threats and compliant with industry regulations.
The profile will have the task of defining and ensuring the implementation of security strategies within the product lifecycle, identifying security requirements, assessing risks and guiding technical and architectural choices to protect data, systems and users.
The role requires a mix of advanced technical skills, knowledge of regulations, risk management skills and a strong propensity to autonomy and design responsibility.

Key Accountabilities

• Identify and analyze potential risks to digital product security, considering software vulnerabilities, external and internal threats, and the possible consequences of possible attacks;
• Select and implement appropriate security controls such as firewalls, intrusion detection systems (IDS/IPS), antivirus, encryption, multi-factor authentication and backup systems;
• Design and implement incident response plans to manage and resolve security breaches, including evidence collection, threat containment, damage repair, and communication with stakeholders;
• Develop and implement risk management plans, constantly monitoring the effectiveness of the measures taken;
• Assess threats and vulnerabilities of systems, with particular emphasis on identifying risks.

Education

Qualifications

• At least 5 years of proven experience in the role of Security Architect or similar positions within product cybersecurity;
• Solid knowledge of operating systems, networks and databases;
• Ability to analyze, test and secure web, mobile, desktop and embedded systems applications;
• Expertise in the management of processes and data, with a focus on preventing unauthorized access and failures;
• Familiarity with security tools such as firewalls, antivirus, IDS/IPS and security analysis tools;
• Basic knowledge of EMI/EMC issues related to Radar Systems, with reference to MIL-STD-464 and MIL-STD-461;
• Risk management skills and knowledge of industry regulations.

Certification (preferential):

• CEH (Certified Ethical Hacker);
• CISSP (Certified Information Systems Security Professional);
• CCNA Security.

Soft skills:

• Excellent problem solving skills;
• Ability to work in teams and ability to collaborate effectively with different stakeholders;
• Good communication skills in Italian and English, with level of English at least B2.

Availability for domestic and international travel.

Competencies