Description
* Partner closely with Business Security Officers, Business Security Engineers and Application Development teams to establish and mature the Threat Modeling culture
* Develop and deliver secure SDLC training to application development teams
* Determine tools necessary to support secure SDLC processes and output
* Define, create and report on KPI's to measure effectiveness and maturity of Secure SDLC at various levels within Mastercard
* Work closely with application development areas to ensure proper security considerations are addressed during the design phase of the software development life cycle (SDLC)
* Well versed in application development via previous software engineering experience with Java, .NET or similar enterprise programming language espacially realted to secure coding best pratcies
* Experience with SAST, DAST and/or IAST tooling and how to integrate capabilities is to software deliver pipeline.
Well versed in application secure design principles, and secure coding techniques
* Experience in secure design reviews
* Experience providing secure design advice for web based environments and secure communication, including mobile applications, web applications and web services
* Previous software engineering experience with Java or similar enterprise programming language, especially related to secure coding best practices
* Experience in threat modelling tools/methodologies, and attack tree a plus
* Demonstrate a broad awareness of security engineering concepts and practices across all phases of the software development life cycle
* Experience of continuous delivery/continuous integration (CI/CD) processes and procedures including critical security considerations in automated workflows
* Demonstrate the ability to articulate and communicate effectively to diverse audiences and properly translates security and risk management terminology into business terms, and recommends alternative solutions to these stakeholders
* Strong verbal and written communication skills