Application Security Architect - Cyber Defense Professionals

Job Expired

General information

City: Palo Alto, Raleigh, Cary

State/Province: California, North Carolina

Country: Canada, United States

Department: Information Management

Date: Friday, January 14, 2022

Working time: Full-time

Ref#: 20011232

Job Level: Individual Contributor

Job Type: Experienced

Job Field: Information Management

Seniority Level: Associate

Description & Requirements

Xerox (NYSE: XRX) makes every day work better. We are a workplace technology company, building and integrating software and hardware for enterprises large and small. As customers seek to manage information across digital and physical platforms, Xerox delivers a seamless, secure and sustainable experience. Whether inventing the copier, the ethernet, the laser printer or more, Xerox has long defined the modern work experience. Learn more at www.xerox.com and explore our commitment to diversity and inclusion.

Summary:

This position is part of the Xerox Cyber Security team that is responsible for driving security of Xerox digital platforms. The qualified candidate will provide technical leadership to a multidisciplinary security architecture team that is responsible for securing enterprise systems, applications, and products across a broad spectrum of technologies. The candidate must demonstrate a passion for application security and lead by example that fosters continued growth and technical expertise within the team.

Primary Responsibilities:

Develop and evolve security baselines, design patterns aligned with standards and best practices
Perform security design reviews of application or products and define security requirements as part of SDLC process
Review and guide security architects and engineers on the development of appropriate security standards and technology baselines
Provide technical leadership for security engineering efforts addressing top cyber security priorities and funded projects
Provide secure design guidance to application and product teams
Research, analyze and report on security industry trends and products
Implement secure SDLC processes through effective collaboration
Serve as a security evangelist for executive management and business stakeholders.

Knowledge and Skills Required:

Strong knowledge of and experience in security requirements, standards and practices including NIST CSF, NIST 800-53, ISO 27001, PCI DSS, SOC2 OWASP Top 10, SANS Top 25, etc.
Strong understanding of modern application, microservices architecture in hybrid environments
Previous software development experience in one or more programming languages such as C/C++, Java, Python, .Net, PHP etc.
Experience performing security design review, threat modelling using STRIDE and DREAD methodology
Strong domain expertise and technology implementation/ integration experience in one or more areas such as Identity & Access Management, Application Security and Container Security.
Experience building secure architectures using cloud native technologies in AWS and/or Azure
Knowledge of and prior hands-on experience in a wide variety of security tools/ technologies
Excellent communicator who is comfortable discussions with technical, architecture teams and presenting to executive management
Excellent written as well as verbal communication skills
Uncompromising personal and professional integrity and ethics

Education and Experience Required:

B.S in computer science, information systems, engineering or related field.
Advanced degree preferred; i.e. MBA or MS
At least 7 years of related security experience
One or more Industry-standard security certifications (such as CISSP, CSSLP, CCSP, SANS/GIAC)

Xerox is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity or expression, sex, marital status, sexual orientation, physical or mental disability, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law. Learn more at www.xerox.com and explore our commitment to diversity and inclusion! People with disabilities who need a reasonable accommodation to apply or compete for employment with Xerox may request such accommodation(s) by sending an e-mail to [email protected]. Be sure to include your name, the job you are interested in, and the accommodation you are seeking.