Lead Product Security Specialist

Requirements

• Demonstrable experience in a Security related role
• A proven track record of working with one or more of the main cloud vendor platforms, specifically AWS
• Certifications such as AWS Solutions Architect, Azure Solutions Architect are desirable
• Previous management experience
• Excellent communication skills, including communicating complex technical concepts to non-technical stakeholders
• Technical background across multiple security domains and familiarity with cloud security standards
• Experience with in an Agile and Dev Sec Ops  context
• Problem solving skills with the ability to use own experience to develop pragmatic solutions and resolve complex issues
• Accomplished in forging effective relationships at all levels, skilled at influencing and negotiating
• Certifications such as CISSP, CEH, OSCP, or GSEC are preferrable
• Knowledge of security principles, practices, and frameworks, such as OWASP, NIST, and ISO
• Awareness of security tools and technologies, such as SAST, DAST, IAST, SCA, WAF, IDS, IPS
• Experience in conducting threat modelling and risk assessments

• As the Lead Security Specialist at HL, you will join a team of security experts working with various modern technologies to ensure the security of HL's products
• You will oversee security issues and requirements for all product teams, dealing with complex projects daily and serving as the escalation point for the Product Security Specialist (PSS)
• You will lead threat modelling workshops and engage with key stakeholders to identify threats and recommend countermeasures
• Additionally, you will lead a team of Product Security Specialists, providing leadership, technical guidance, and support in tailoring their development to meet their individual needs
• Working within Product teams, you will be the single point of contact for security related matters ranging from daily significant change to complex Cloud serverless transformation projects
• Collaborating with strategy, transformation, and digital engineering parts of HL to develop and manage the implementation of secure cloud architectures
• Supporting in the creation and implementation of architecture blueprints and proof of concepts on Cloud platforms supporting best practice, secure by design
• This role is permanent, full time, 37.5 hours per week, Monday to Friday