Principal/Senior Staff Security Engineer - (Product Security)

Job Description

• Reporting within the Information Security Services department, you will be responsible for the secure architecture of the cloud platform, products and customer facing services. • Develop technology roadmap, architecture and implement security and compliance for the Guidewire enterprise. • Collaborate with cross functional teams to architect various security controls such and translate them for engineering implementation. • Collaborate with Open Source communities, Product Development, Professional Services, Cloud Operations, and Business Technology and provide technical leadership to develop and maintain compliance. • Evangelize security best practices across Guidewire. • Create security metrics and work with the teams to achieve the same. • Provide insight and recommendations on remediation strategies for security issues. • Own security architecture and provide technical guidance to multiple teams. • Ensure confidentiality, integrity, and availability within the design of architected solution. • Ensure High Availability (HA) and Disaster Recovery (DR) are designed as part of relevant system/services. • Build and lead a high performance team. • Mentor others in security best practices.

Qualifications

• 12+ years within Information Security Services designing, building, and maintaining secure, compliant, and cost-effective solutions. • Prior deep software security experience (SME) and passion for building secure platforms and customer facing solutions. • In-depth knowledge and experience in software or product software security engineering • Emphasize team wins over individual success. • Strong technical communication skills. • Subject Matter Expert on Application Product Security and Design • Proven track record of architecting secure, compliant, cost-effective, and highly available solutions. • Proven track record of designing solutions with security in-depth solutions. • BS or MS degree (Computer Science or Math) • Preferred, industry-based certifications such as CISSP, CISM, CISA, etc… • Preferred technical certifications from cloud providers or security tool providers.

Benefits

• 11 paid holidays • Generous Accrued Time Off increasing with years of service • Generous paid sick time • Annual day of service