Cyber Security - Lead Engineer

$105,000 - $165,000/Yr

FICO

Full-time - Senior

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

The Lead Software Security Engineer at FICO will play a crucial role in shaping the security architecture of FICO's analytics and decision platform. This position involves addressing complex security challenges in a cloud and microservices environment, ensuring the implementation of security controls, and preparing products for compliance with industry standards.

Responsibilities

• Secure the design of the next generation FICO Platform and its capabilities.
• Provide full-stack security architecture design from cloud infrastructure to application features.
• Collaborate with product managers, architects, and developers to implement security controls within products.
• Oversee security aspects of the Analytical Model Life Cycle and influence stakeholders to adopt best security practices.
• Proof security implementations within infrastructure and application deployment manifests and CI/CD pipelines.
• Define required controls and capabilities for the protection of FICO products and environments.
• Build and validate declarative threat models in a continuous and automated manner.
• Prepare products for compliance attestations and ensure adherence to best security practices.

Requirements

• Experience in architecture, security reviews, and requirement definition for complex product environments.
• Familiarity with industry regulations, frameworks, and practices such as PCI, ISO 27001, and NIST.
• Experience in threat modeling, code reviews, security testing, vulnerability detection, and remediation techniques.
• Hands-on experience with programming languages such as Java and Python.
• Experience with on-premise to cloud-based infrastructure migrations.
• Experience in deploying and securing cloud environments, preferably AWS.
• Experience in deploying and securing containers and orchestration technologies like EKS, K8S, and ISTIO.
• Ability to articulate complex architectural challenges to business leadership and product management teams.
• Independently drive transformational security projects across teams and organizations.
• Experience with securing event streaming platforms like Kafka or Pulsar.
• Experience with ML/AI model security and adversarial techniques in analytics domains.
• Hands-on experience with Infrastructure as Code (IaC) tools like Terraform, CloudFormation, and Helm, and CI/CD pipelines like Github, Jenkins, and JFrog.

Benefits

• Highly competitive compensation
• Benefits and rewards programs
• Work/life balance
• Employee resource groups
• Social events to promote interaction and camaraderie