Director, Security Architecture – Vulnerability Management and Response

🕒 vor 18 Tagen

❄️ Minnesota – Remote

❄️ Minnesota – Remote

💵 $178.000 - $296.700 / Jahr

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Omnissa

WebsiteLinkedInAlle Stellen

1001 - 5000 Mitarbeiter

🤖 Künstliche Intelligenz

🏢 Unternehmen

🏥 Gesundheitswesen

Artificial Intelligence • Enterprise • Healthcare

Omnissa ist ein Technologieunternehmen, das eine KI-gesteuerte digitale Arbeitsplattform anbietet, die darauf ausgelegt ist, das Mitarbeitererlebnis zu verbessern und IT-Operationen zu optimieren. Zu den Lösungen gehören einheitliche Endpoint-Verwaltung, virtuelle Desktops und Anwendungen sowie Sicherheitskonformität, um eine produktive Belegschaft in verschiedenen Branchen wie Gesundheitswesen, Finanzdienstleistungen und Einzelhandel zu stärken. Der innovative Ansatz von Omnissa bietet sichere, cloud-native Lösungen, die sich an die sich entwickelnden Bedürfnisse von Unternehmen und ihren Mitarbeitern anpassen.

Beschreibung

• Set the multi-year strategy and roadmap aligned to Omnissa's risk appetite and business objectives. • Lead, mentor, and grow a globally distributed team of senior security engineers and architects across AMER and APAC. • Serve as the senior escalation point for design conflicts and remediation prioritization decisions, and for security incidents surfaced through the vulnerability response (PSIRT) process. • Represent the function to executive leadership, translating technical risk into business terms and reporting on posture, progress, and investment needs. • Partner with all lines of business to establish security standards, perform architecture and design reviews, and embed security into every stage of design and implementation. • Drive security framework development, hardening standards, and policy adherence across the enterprise. • Conduct risk assessments and requirements gathering for new infrastructure, products, and services, ensuring controls are defined before deployment. • Partner closely with Product Security and engineering to define security architecture requirements across the SDLC and CI/CD ecosystem, including threat modeling, architecture standards, SAST, DAST, software composition analysis, secrets detection, and artifact/image signing, ensuring security controls are built into development and deployment workflows from design through release. • Drive secure-by-design practices across the enterprise, reference architectures, secure design patterns, and paved-road templates that make the secure path the default path for engineering teams, reducing reliance on after-the-fact review. • Own the end-to-end Exposure Management program, the tooling, scanners, processes, and SLAs that identify, prioritize, and remediate risk across all environments. • Own the enterprise PSIRT strategy, partnering with the team on intake, triage, and coordinated response for vulnerabilities in Omnissa products and services.

🎯 Anforderungen

• 10+ years in information security, including 5+ years leading technical security teams (engineering, architecture, and/or Exposure/Vulnerability Management), preferably at global SaaS companies. • Experience building and operating enterprise identity security strategy, including IAM/PAM architecture, authentication standards, and identity threat detection. • Deep hands-on background across multiple domains: cloud and network security, endpoint/workload protection, Exposure/Vulnerability Management, and Product Security/SDLC. • Working knowledge of data governance principles (classification, residency, retention) and major compliance/regulatory frameworks — including GDPR, CCPA, and CMMC alongside those listed above; AI risk frameworks a plus. • Proven track record partnering with engineering teams at a global SaaS company to drive security outcomes through influence and collaboration rather than mandate. • Experience with the full risk lifecycle: risk assessment, requirements gathering, control design, tool selection, vendor negotiation, and remediation oversight. • Strong communication skills with the ability to influence executives and engineers alike. • Hands-on experience partnering with Product/Application Security teams to integrate security into SDLC and CI/CD pipelines • Practical experience with threat modeling methodologies and driving secure-by-design outcomes at the architecture stage, before code is written. • Experience operating across a globally distributed team and supporting 24x7 service models.

🏖️ Vorteile

• employee ownership • health insurance • 401k with matching contributions • disability insurance • paid-time off • growth opportunities • more