Líder de Seguridad de Aplicaciones

Minimum Qualifications

• MSc or BSc in Electrical Engineering, Computer Science, Computer Engineering, Electronics Engineering, or equivalent practical experience.
• 4+ years of experience in application security related role. Experience can be an engineering / development position (e.g., consumer or enterprise), an assessment / consultancy role, an equivalent role in other engineering organizations, or a combination of them.
• 2+ years of experience in technical project management in a role related to product or information security.

Key Skills & Preferred Qualifications

• Experience with security concepts, cryptography, and protocols across various Application types (cloud, web, mobile, IoT / Embedded, etc.).
• Experience with reviewing application security architectures & engaged technologies.
• Experience with Mobile (iOS & Android), Cloud (GCP, AWS, Azure, etc.) or Web (Frontend & Backend) platforms.
• Experience in reading source code, discerning business logic pitfalls, and identifying security flaws in at least one of the following groups of languages:
  • Mobile-relevant, such as Swift, Obj-C, Kotlin, Java, Dart, and JavaScript.
• Web- and Cloud-relevant, such as Java, Ruby, Rust, Go, Python, PHP, C#, Lua, and JavaScript.
• Experience with application authentication, authorization, identity, and access management methods, such as OAuth, SSO, JWT, PKI / Certificates, Cloud IAM, and Password-less authentication.
• Familiarity with application security features and key management systems backed by secure hardware, such as Mobile Biometric authentication, Keystore / Keychain, TPM / vTPM, HSM and SE.
• Familiarity with product security assessments and S-SDLC processes.
• Experience with managing technical teams.
• Experience with translating complex technical concepts into relevant messages suitable for various audiences (engineering and different tiers of management).
• Experience with stakeholder management for security engineering deliverables.
• Experience working with international teams located in other regions and time zones worldwide.
• Excellent leadership, ownership, problem solving skills, and willingness to learn/grow.
• Proficient in English and excellent communication skills.

About the Job / Key Responsibilities

CENSUS' bespoke cybersecurity services are built upon a talented pool of Security Engineers, whose role extends beyond mere adherence to industry best practices. Our Technical Project Managers play a pivotal role in formulating and executing service delivery strategies that align with the rigorous quality standards set by CENSUS. Drawing from their robust technical background and leveraging their project & stakeholder management skills, TPMs serve as the primary facilitators empowering our clients to effectively maximize the potential of our assessment and advisory teams.

We are looking for talented & ambitious professionals to grow our Product Security Professional Services team and join our ongoing mission to deliver in-depth and top-tier cybersecurity services to our valued clients. As part of this role, you will use your technical background - in the Application Security domain - along with your Project Management skills to ensure a successful service delivery to our clients. You will work side-by-side with our clients' development and security teams & partners, under engagements / projects that involve:

• Working with our clients to understand their requirements and scope, size, & plan the corresponding technical activities to efficiently meet those (consulting, assessments, audits, evaluations, security architecture development, etc.).
• Receiving high-level task & product descriptions and decomposing them to smaller & well-defined technical activities, which are then assigned to the corresponding security engineering & consulting teams.
• Leading project's technical team within the scope of the engagement.
• Documenting and presenting product security risks in both technical and business-oriented language.
• Conducting technical QA and presenting to both technical and business audiences, the technical team deliverables (findings, technical reports, observations, improvement recommendations, operational methodologies, etc.).
• Building and developing relationships with cross-client teams and partners.
• Owning & driving the continuous improvement of the technical quality of the project team deliverables.
• Ensuring client satisfaction and business growth by communicating lessons learned and key success factors to the business development team.

• Ability to travel