<img src="https://dmscdn.successfactors.com/27c0a91770d9ecac9ed08a9f63f401a6121aa728d77960676d754d492bcae147/static_content/77526a33984e424982f2/HIDBanner.png" alt="" width="780" height="130"> An Amazing Career Opportunity for a Product Security and Privacy Architect!! Location: Remote (US & Europe) Job ID: 47563 As part of the Product Security and Privacy team, reporting to the Chief Product Security & Privacy Architect, you will support product teams in adopting and implementing HID’s security and privacy program. Accountable for the quality, consistency, and defensibility of all security & privacy related artifacts you guarantee that outputs are “audit-ready,” and not just “done.” You will have opportunities to work on a very wide portfolio of applications based on different technologies (Web, Embedded, Mobile, Desktop) within a very diverse and international context covering all five HID Business Areas. Who are we? HID powers the trusted identities of the world’s people, places, and things, allowing people to transact safely, work productively and travel freely. We are a high-tech software company headquartered in Austin, TX, with over 4,500 worldwide employees. Check us out here: <a href="https://www.hidglobal.com/" target="_blank" rel="noopener">www.hidglobal.com</a> and <a href="https://youtu.be/23km5H4K9Eo" target="_blank" rel="noopener">https://youtu.be/23km5H4K9Eo</a> As our Product Security and Privacy Architect, you’ll support HID’s success by: <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Leading day-to-day security/privacy architecture governance, escalating and obtaining approval from the Chief Product Security & Privacy Architect as required.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Defining corporate wide security and privacy requirements, controls, and standards.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Defining corporate wide Secure Coding, third-party, deployment policies & other architecture-related standards.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Defining required training content.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Defining paved roads/security and privacy-by-design patterns and libraries.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Leading development of AI-enabled PSP Architecture capabilities: define use cases, requirements, and success criteria.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Owning the threat modeling framework and quality bars.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Running/approving security & privacy architecture reviews.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Leading audit/assessment planning, evidence of expectations, and defensibility.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Being responsible for tooling selection and integration related to security & privacy architecture domain.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Architecting compliance, analyzing new regulations and standards to identify gaps in the platform's capabilities, standards, and controls.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Assessing New Acquisitions Architecture and contributing to due diligence on a needed basis.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Providing recommendations for risk acceptance and exception requests. </li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Providing input on tooling strategy and integration guidance for non-architecture related domains.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Providing guidance on security requirements for supply chain tooling, pipeline architecture, and associated standards.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Validating that platform architecture enables enforcement of PSP security controls.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Providing expert input on exploitability, attack paths, and mitigation options during Incident handling process</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Providing guidance on true risk vs noise for security tool outputs and penetration tests.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Providing subject-matter depth during training delivery: advanced Q&A, edge cases, Offer office hours or follow-ups for complex topics</li> </ul> Your Experience and Background include: <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Master's Degree, computer science, or similar qualifications.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">At least 3 years in software/product security, application security, or security architecture</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">At least 7 years of hands-on software engineering / QA / DevOps earlier in career (or equivalent).</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">At least one security or privacy certification (CISSP, CIPT, CSSLP, CEH, ...) is a plus.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Proven ownership of at least one of: threat modeling program, secure design review governance, audit evidence management, security tooling strategy, penetration testing program or similar.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience contributing to at least one Secure Software Development Lifecycle (SSDL) program, either as a security architect, security champion, or similar role.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Working knowledge of general principles of application security</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Working knowledge of threat modeling principles. </li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Working Knowledge of security standards (OWASP, ISO, NIST, ...).</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Knowledge of security regulations, such as the Radio Equipment Directive (RED), Cyber Resilience Act (CRA), Federal Information Processing Standards (FIPS), and Common Criteria (CC) or equivalent. </li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Good understanding of cryptographic principles, including algorithms, key management, and protocols.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience using security tools (SAST, DAST, SCA, Vulnerability Scanners, Secret Scanners).</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Hands-on experience in at least one, preferably more, of these application domains: <ul style="list-style-type:circle;margin-bottom:0.0in;margin-top:0.0px"> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Embedded device Security</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Mobile security</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Web & API security</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Desktop security</li> </ul> </li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience with Agile/SAFe Methodology is preferred.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Experience with usage of AI tools in the context of a security program is preferred.</li> <li style="margin-right:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;margin-left:0.0px">Cloud infrastructure, Supply Chain, and deployment Security is preferred. </li> </ul> What we can offer you: <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Competitive salary and rewards package</li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:Calibri, sans-serif">Competitive benefits and annual leave offering, allowing for work-life balance</li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">A vibrant, welcoming & inclusive culture </li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Extensive career development opportunities and resources to maximize your potential</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">To be a part of a global organization that is pioneering the hardware, software and services that allow people to confidently navigate the physical and digital worlds</li> </ul> Why apply? <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 48.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Empowerment: You’ll work as part of a global team in a flexible work environment, learning and enhancing your expertise. We welcome an opportunity to meet you and learn about your unique talents, skills, and experiences. You don’t need to check all the boxes. If you have most of the skills and experience, we want you to apply.</li> <li style="margin:0.0in 0.0in 0.0in 48.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Innovation: You embrace challenges and want to drive change. We are open to ideas, including flexible work arrangements, job sharing or part-time job seekers. </li> <li style="margin:0.0in 0.0in 0.0in 48.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Integrity: You are results-orientated, reliable, and straightforward and value being treated accordingly. We want all our employees to be themselves, to feel appreciated and accepted.</li> </ul> The wage range for this role considers a broad scope of factors that are considered when making compensation decisions, including but not limited to: skill sets, experience and training, licensure and certifications, and other business and organizational needs. The disclosed range does not account for geographic differentials based on the location where the position may be filled. At HID, it is uncommon for individuals to be hired at or near the top of the range. Final compensation decisions depend on the specific facts and circumstances of each case. The base salary in the United States is $140,000 USD to $160,000 USD. This opportunity may be open to flexible working arrangements. HID does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. We are not responsible for any fees related to unsolicited resumes. HID is committed to building a diverse, equitable, and inclusive workforce that reflects the global communities we serve. As an equal opportunity employer, we welcome applications from individuals of all backgrounds, experiences, and perspectives. We evaluate applicants without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, disability, age, veteran status, or any other legally protected characteristic. Our goal is to create a workplace that empowers everyone to thrive and be their authentic selves, fostering an environment of mutual respect and inclusivity. If you have a disability and require assistance or accommodation to participate in the application process or to perform essential job functions, please contact <a href="mailto:[email protected]">[email protected]</a>. Please be aware that our recruitment process may include the use of AI-powered tools to assist in screening applicant resumes. These tools help us efficiently identify candidates whose qualifications and skills align with the job description. We use AI in a responsible manner and in accordance with applicable data privacy laws and regulations. Importantly, all applicants are reviewed by our Talent Acquisition team. AI is used to support, not replace, human judgment in the evaluation process. We make it easier for people to get where they want to go! On an average day, think of how many times you tap, twist, tag, push or swipe to get access, find information, connect with others or track something. HID technology is behind billions of interactions, in more than 100 countries. We help you create a verified, trusted identity that can get you where you need to go – without having to think about it. When you join our HID team, you’ll also be part of the ASSA ABLOY Group, the global leader in access solutions. You’ll have 63,000 colleagues in more than 70 different countries. We empower our people to build their career around their aspirations and our ambitions – supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally. As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences. #LI-HIDGlobal

Product Security and Privacy Architect (Austin, TX, US, 78753) @ ASSA ABLOY AB

About this role

Ready to apply?