<img src="https://dmscdn.successfactors.com/27c0a91770d9ecac9ed08a9f63f401a6121aa728d77960676d754d492bcae147/static_content/77526a33984e424982f2/HIDBanner.png" alt="" width="780" height="130"> <h1>An Amazing Career Opportunity for Product Security and Privacy Architect Location: Chennai, India (Hybrid) Job ID: 47565</h1> Profile Summary: As part of the Product Security and Privacy team, reporting to the Chief Product Security & Privacy Architect, you will support product teams in adopting and implementing HID’s security and privacy program. Accountable for the quality, consistency, and defensibility of all security & privacy related artifacts you guarantee that outputs are “audit-ready,” and not just “done. You will have opportunities to work on a very wide portfolio of applications based on different technologies (Web, Embedded, Mobile, Desktop) within a very diverse and international context covering all five HID Business Areas. About HID Global HID Global powers the trusted identities of the world’s people, places and things. We make it possible for people to transact safely, work productively and travel freely. Our trusted identity solutions give people secure and convenient access to physical and digital places and connect things that can be accurately identified, verified and tracked digitally. Millions of people around the world use HID products and services to navigate their everyday lives, and over 2 billion things are connected through HID. We work with governments, educational institutions, hospitals, financial institutions, industrial businesses, and some of the most innovative companies on the planet. Headquartered in Austin, Texas, HID Global has over 4500 employees worldwide and operates international offices that support more than 100 countries. HID Global® is an ASSA ABLOY Group brand. HID Global has is the trusted source for secure identity solutions for millions of customers and users around the world. In India, we have two Engineering Centre (Bangalore and Chennai). Global Engineering Team is based in Chennai and one of the Business Unit Engineering team is based in Bangalore. Check us out: <a href="http://www.hidglobal.com">www.hidglobal.com</a> and <a href="https://youtu.be/23km5H4K9Eo" target="_blank" rel="noopener">https://youtu.be/23km5H4K9Eo</a> LinkedIn: <a href="http://www.linkedin.com/company/hidglobal/mycompany/">www.linkedin.com/company/hidglobal/mycompany/</a> Are You Ready to Join the Team? Our company is committed to finding the best and the brightest talent to help us reach the top. If you are a dynamic, highly skilled, experienced Cloud engineer and technology enthusiast, and you enjoy working in a rapid pace within a rapidly growing business environment, then you will want to consider this position. If you excel at communication, collaboration, and unrelenting innovation, we want to talk to you. And if you bring dedication, positive energy and integrity to the table, you just might be the right fit for our team. Qualifications To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Roles & Responsibilities (Other duties may be assigned) <ul type="disc"> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Leads day-to-day security/privacy architecture governance, escalates and obtains approval from the Chief Product Security & Privacy Architect as required.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Define corporate wide security and privacy requirements, controls, and standards.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Define corporate wide Secure Coding, third-party, deployment policies & other architecture-related standards.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Define required training content.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Define paved roads/security and privacy-by-design patterns and libraries.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Lead development of AI-enabled PSP Architecture capabilities: define use cases, requirements, and success criteria.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Own the threat modeling framework and quality bars.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Run/approve security & privacy architecture reviews.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Lead audit/assessment planning, evidence of expectations, and defensibility.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Responsible for tooling selection and integration related to security & privacy architecture domain.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Architect for compliance, analyze new regulations and standards to identify gaps in the platform's capabilities, standards, and controls.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Assess New Acquisitions Architecture and contribute to due diligence on a needed basis.</li> </ul> Primary Duties: These define the broader responsibilities and areas of ownership within the role <ul type="disc"> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Provide recommendations for risk acceptance and exception requests.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Provide input on tooling strategy and integration guidance for non-architecture related domains.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Provide guidance on security requirements for supply chain tooling, pipeline architecture, and associated standards.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Validate that platform architecture enables enforcement of PSP security controls.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Provide expert input on exploitability, attack paths, and mitigation options during Incident handling process</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Provide guidance on true risk vs noise for security tool outputs and penetration tests.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Provide subject-matter depth during training delivery: advanced Q&A, edge cases, Offer office hours or follow-ups for complex topics</li> </ul> <div align="center"> </div> Technical Skills: <ul> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Experience contributing to at least one Secure Software Development Lifecycle (SSDL) program, either as a security architect, security champion, or similar role.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Working knowledge of general principles of application security</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Working knowledge of threat modeling principles.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Working Knowledge of security standards (OWASP, ISO, NIST, ...).</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Knowledge of security regulations, such as the Radio Equipment Directive (RED), Cyber Resilience Act (CRA), Federal Information Processing Standards (FIPS), and Common Criteria (CC) or equivalent.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Good understanding of cryptographic principles, including algorithms, key management, and protocols.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Experience using security tools (SAST, DAST, SCA, Vulnerability Scanners, Secret Scanners).</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Hands-on experience in at least one, preferably more, of these application domains: <ul style="list-style-type:circle"> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Embedded device Security</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Mobile security</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Web & API security</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Desktop security.</li> </ul> </li> </ul> Preferred Qualifications <ul type="disc"> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Cloud infrastructure, Supply Chain, and deployment Security</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Experience with Agile/SAFe Methodology</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Experience with usage of AI tools in the context of a security program.</li> </ul> <div align="center"> </div> Education and/or Experience <ul> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Master's Degree, computer science, or similar qualifications.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">At least 3 years in software/product security, application security, or security architecture</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">At least 7 years of hands-on software engineering / QA / DevOps earlier in career (or equivalent).</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">At least one security or privacy certification (CISSP, CIPT, CSSLP, CEH, ...) is a plus.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Proven ownership of at least one of: threat modeling program, secure design review governance, audit evidence management, security tooling strategy, penetration testing program or similar.</li> </ul> Soft Skills <ul> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Ability to effectively communicate complex concepts clearly and effectively in the English language, both verbally and in writing.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Like training and knowledge-sharing, with a strong motivation to ensure the security program is successfully implemented by the teams.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Highly adaptable and approachable, fostering collaboration and open communication.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Ability to tailor your communication to different audiences such as product owners, development teams, architects, and other high-level users.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Strong technical acumen with the ability to engage effectively with development teams and Continuous learning mindset. </li> </ul> <h2> </h2> <h2>Why apply?</h2> <ul> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Empowerment: You’ll work as part of a global team in a flexible work environment, learning and enhancing your expertise. We welcome an opportunity to meet you and learn about your unique talents, skills, and experiences. You don’t need to check all the boxes. If you have most of the skills and experience, we want you to apply.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Innovation: You embrace challenges and want to drive change. We are open to ideas, including flexible work arrangements, job sharing or part-time job seekers.</li> <li style="font-family:'times new roman', times, sans-serif;font-size:14.0pt">Integrity: You are results-orientated, reliable, and straightforward and value being treated accordingly. We want all our employees to be themselves to feel appreciated and accepted.</li> </ul> This opportunity may be open to flexible working arrangements. HID is an Equal Opportunity/Affirmative Action Employer – Minority/Female/Disability/Veteran/Gender Identity/Sexual Orientation. We make it easier for people to get where they want to go! On an average day, think of how many times you tap, twist, tag, push or swipe to get access, find information, connect with others or track something. HID technology is behind billions of interactions, in more than 100 countries. We help you create a verified, trusted identity that can get you where you need to go – without having to think about it. When you join our HID team, you’ll also be part of the ASSA ABLOY Group, the global leader in access solutions. You’ll have 63,000 colleagues in more than 70 different countries. We empower our people to build their career around their aspirations and our ambitions – supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally. As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences. #LI-HIDGlobal

Product Security and Privacy Architect (Chennai, IN, 600 032) @ ASSA ABLOY AB

About this role

Ready to apply?