Product & Solution Security Expert (PSSE):

• PSSE provides technical expertise about PSS to the RnD / DEVOPS, SRE & Architecture teams

• PSSE should be specialized at least in one of the following different areas: Secure Architecture and Design, Secure Implementation, Secure Manufacturing, Secure Project Integration, Secure Services, Security Testing

• Supports and consults the project leaders in implementing the required product & solution security (on Cloud – AWS, Azure etc.)

• Supports project teams in conducting the corresponding security activities during the development process, project management process and / or services

• Can support multiple projects at the same time and should occupy the function for the main part of is defined working time

• KPI & Metrix Reports to the Project / Functional Lead and the Product & Solution Security Officer

• Compliance and Governance knowledge and previous experience in ISO 27001, SOC2, QMS, MLPS, Data Privacy norms is helpful

• Primarily involved in the architecture and design phase of production equipment, systems and solutions

• Acts as the interface between different development team, SRE, PSS & CISO Teams

• PSSE for Security Testing is primarily involved in the testing of products, systems and solutions. During the test, the PSSE supports the verification of security requirements and conducts penetration tests to identify security vulnerabilities. Moreover, PSSE evaluates the effectiveness of defined measures based on threat and risk analysis

• PSSE for Secure Service supports service managers to securely develop and operate any Software Services

• Ensures that security is adequately reflected in skills, processes and technologies (tools, platforms) used for service delivery

• Continuously monitors and evaluates the effectiveness of the security measures and supports in incident handling

• PSSE is responsible for implementation of the requirements of the PSS Guide into the respective service

Education & Certification:

• Degree in computer science, IT security, electronics or related fields is helpful

• Certification Program - Certified Secure Software Lifecycle Professional (CSSLP) is helpful

• AWS Certified Security - Specialty Certification is helpful

Job Family: Research & Development

Req ID: 385321