Description:
This is a director of engineering role in the Application and Infrastructure Security Product Area within the Enterprise Cybersecurity business unit. We seek an expert engineer in the area of Application Security, this person will work as part of our engineering team and partner across the firm stakeholders in other business units.
The focus of the role will be in our Application Security capability, we provide innovative tools, libraries, and solutions to support, and verify the implementation of security controls across the Fidelity application development lifecycle. The squad is made up of highly motivated and engaged associates, split across North America and Ireland who all work in a fast-paced agile environment.
The Expertise You Have
- Extensive application security experience, including (but not limited to) Static Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Web Application Firewalls (WAF), Pen Testing. Experience completing market analysis of tools that support these capabilities
- An engineering expert both from a technical perspective as well as coaching and mentoring of engineers on the team
- Expert knowledge of the Software Development Lifecycle with a developer experience mindset with the ability to represent the technical work to developers across the enterprise and to leadership
- Working knowledge of the OWASP top 10 and the ability to explain to others
- B.S.in Computer Science preferred, Engineering / Mathematics or comparable.
- 10+ years of full stack software programming experience building scalable and high throughput applications.
- AWS certification preferred, and have working experience with multi-cloud environments, including EKS, Lambda, DynamoDB (NoSQL), SQS, S3, EFS, API Gateway, and CDK for deployment.
- Experience building and deploying cloud enabled applications leveraging 12 factor designs.
- Hands on experience with automation & pipeline implementation (Testing, Continuous Integration / Continuous Delivery pipeline).
- Some experience working with a micro-services/serverless application architecture, including API consumer/producer knowledge.
The Skills You Bring
- You possess strong engineering skills and have experience developing maintainable, scalable multi-tiered applications.
- You are capable of designing and developing tools/applications using some of the following technologies: Unix and Shell scripting; Common programming languages such as core Java, Python, etc; Popular OpenSource frameworks/libraries (e.g. Spring, SpringBoot, Apache Commons, etc.); SOA and API frameworks such as SOAP and REST; Pipeline/Build tools including GIT, Maven, Jenkins, Jenkins Core, and AWS CFT/CDK; Front end languages/frameworks including JavaScript/Typescript, JQuery, Angular, NodeJS, Springboard and React a plus.
- You have demonstrated technical leadership across an organisation, implementing the highest quality technology solutions, providing context and technical direction, defining technical specifications, and documenting processes.
- You have partnered with architects for end-to-end architecture, breaking down architecture into designs.
- You have shown innovation and can performs POCs. Implements frameworks and patterns.
- You have led and reviewed solutions and code.
- You have automation experience and look for opportunities to reduce waste and improve efficiency.
- You have experience with test automation, including working knowledge of functional/integration test tools like Cucumber/ Selenium/ Cypress, and Performance testing tools like JMeter.
- You have a Security Architecture mindset.
- You have experience working in an Agile environment (Scrum).
- You are open to direction and following agreed upon standards, while being able to handle ambiguity, enjoy experimenting, developing, and collaborating with teammates on solution alternatives.
- Ability to communicate effectively to positively influence peers, Business Unit and Technology decision makers.
- You have analytical and critical thinking skills and an ability to tackle issues through timely decisions, using data, experience, and sound judgment.
- You are motivated and can take initiative to solve problems both independently and as part of an Agile team.
- You are hardworking, proactive and adaptive, and can work in a dynamic, diverse and geographically distributed team.
- You have a passion for continual learning and are always ready to guide, support and/or mentor other members of your team!