Cyber Security Engineering, Sr Staff Engineer

$157,000 - $235,000/Yr

Synopsys - Austin, TX

Full-time - Senior

Austin, TX

Publishing Industries

About the position

The Cybersecurity Architect at Synopsys' Software Integrity Group (SIG) plays a pivotal role in ensuring the security of software solutions by collaborating with various stakeholders to understand and address security and business needs. This position requires a deep understanding of both technical and business aspects of cybersecurity, as well as the ability to drive innovation while maintaining security standards. The architect will define enterprise network and cloud security architectures, considering factors such as scalability, reliability, maintainability, interoperability, and supportability. This role is essential in guiding the integration of SIG solutions into diverse operating environments and ensuring that security controls are effectively implemented. In this role, the Cybersecurity Architect will be responsible for reviewing designs that involve critical security controls, including authentication and authorization mechanisms, data protection strategies, and encryption practices. The architect will also design and architect complex non-functional features such as multitenancy, high availability, disaster recovery, and zero-downtime patching capabilities. A significant part of the job involves defining and promoting the adoption of common security patterns and best practices across the organization. Additionally, the architect will provide mentorship and thought leadership to software engineers, helping them understand security needs and solutions, thereby fostering a culture of security awareness within product teams. The ideal candidate will possess strong leadership skills, technical expertise, and business acumen, with a proven track record of securing enterprise operating environments. They will be expected to engage in strategic decision-making, initiate conversations about security, and challenge conventional wisdom to drive innovation. This role is critical in ensuring that Synopsys continues to provide secure, high-quality software solutions that meet the evolving needs of customers and their clients.

Responsibilities

• Define enterprise network and cloud security architectures, including on-premises and SaaS solutions while considering scalability, reliability, maintainability, interoperability, and supportability.
• Build close relationships and collaborate with staff from IT, R&D, cloud operations, product management, and business development groups.
• Guide the successful integration of SIG solutions into various operating environments.
• Review designs involving security controls such as authN/authZ, data protection, encryption, secrets management, etc.
• Design and architect complex non-functional features such as multitenancy, high availability, disaster recovery, and zero-downtime patching capabilities.
• Define and foster adoption of common security patterns and best practices.
• Provide enterprise security mentorship and thought leadership for the software engineers in the product teams to educate them on security needs and solutions.

Requirements

• 7+ years of experience defining secure operating environments, including traditional on-premises, virtual, and cloud environments using a variety of technology solutions.
• Experience designing complex SaaS application and deployment architectures.
• Strong knowledge of IT, network, and cloud vulnerabilities and security controls.
• Experience with cloud databases and application-level encryption.
• Familiar with security in cloud services such as AWS, Azure, and GCP.
• Broad understanding of standards and controls necessary to maintain security and compliance obligations.
• Experience in leveraging services and techniques (e.g. database behind VPC boundary) to ensure a high level of data protection.
• Experience with DevOps and SaaS and an understanding of how to use modern automation, build, and orchestration technology to accelerate time to value for our customers in public and private cloud environments.
• An innate understanding of issues that affect the performance, scalability, availability, and maintainability of complex software systems with an emphasis on high-volume data management within enterprise and/or web-scale products and platforms that operate under strict SLAs.
• Working knowledge of authentication mechanisms such as OIDC, SAML, and Identity Federation.
• Good understanding of network, application, and cloud security testing techniques.
• Excellent communication and technical leadership skills.
• Self-motivated and works with minimal direction.
• Ability to learn quickly and independently in complex technical environment.
• A Bachelor's in computer science or engineering; advanced degree preferred.

Benefits

• Comprehensive health benefits
• Wellness programs
• Financial benefits including equity and discretionary bonuses
• Competitive total rewards package