Cybersecurity Specialist
Maxim Integrated
- Cavite City, PhilippinesGateway Business Park, General Trias, Cavite City, CALABARZON, PhilippinesCavite CityCALABARZONPhilippinesPhilippines
- Full timeFULL_TIME
Expired 8 years ago
2016-10-23T16:00:00+00:00Job closed.
Job Description
- Help define consistent Secure Software Development Lifecycle practices for all Maxim technology projects throughout the planning and delivery cycles that assure that investments in IT generate business value and mitigate the risks associated with information security.
- Ensure end-to-end security of Maxim applications by hands on testing, hypothesizing threats, helping development teams, remediating risks upfront and championing secure implementation efforts.
- Improve secure coding practices, application security requirements, automation, training, and metrics.
- Integrate threat modeling practices into the Software Development Lifecycle.
- Help build secure processes and standards around emerging technologies and features lacking existing standards and security practices.
- Build strong cross-organizational relationships and effectively influence staff across the IT organization and broader enterprise.
- Collaborate with application development and solution teams proactively to manage software security risk aligned with business goals.
- Collaborate with application and solution teams to achieve Global Information Security software security program objectives.
- Help to define simplified security metrics approach that enables executive leaders, line leaders, and operational staff to quickly take action on application security related risks.
- Manage cross-functional internal and external team collaboration, evangelization, and communications.
- Develop and optimize processes to improve software development efficiency in the consumption of security development practices.
- Maintain active understanding of industry practices for secure software development and incident response.
- Represent Maxim in the software security community globally.
Minimum Qualifications
- BS degree in Computer Science, Software Development, Electrical Engineering or a related technical discipline
- Minimum 5 years experience in software development, preferably for mid to large size enterprises and minimum 2 years experience in information security managing SDLC practices
- Hands on experience with one or more of the following programming languages: C#, Java, JavaScript, Objective C, C, C++ and Ruby; Experience with device driver development a plus
- Experience in building ENTERPRISE web applications preferred
- MUST have deep understanding of OWASP Top 10 and CWE 25; with proven track record and experience in implementing and integrating remediation strategies
- Experience and ability to perform architectural risk assessment (ARA) at all phases of SDLC, as and when required
- EXPERTISE in performing TOP down risk analysis and threat modeling of web applications and frameworks
- Excellent understanding of web applications, web servers, layer 7 application technologies, frameworks and protocols with respect to application development and deployment
- Well versed in web application design, penetration testing, application risk assessment and risk categorization
- Operational knowledge of secure software development life cycle principles from training and requirements gathering to post-implementation operations support
- Well versed (experience preferred) with driving and implementing secure development practices in to SDLC (SSDLC); ability to successfully integrate security into a developers world
- Success in implementing effective Secure SDLC frameworks across a large corporation
- Expertise in frameworks, platforms, SDK's and API integration PREFERRED
- Ability to effectively present and communicate security threats and risks to ANY audience and impress upon them the mitigation techniques and strategies
- Familiar with waterfall and agile development processes and have experience integrating secure development practices into both models.
- Deep knowledge of/experience with the following:
- Agile SDLC processes and PMO reengineering
- Enterprise and application architecture
- SAST, DAST and fuzz testing tools
- Solid problem solving and analytical skills; able to quickly digest any issue/problem encountered and recommend an appropriate solution
- Self-motivated; able to work independently; able to negotiate and bring consensus to diverse priorities of application development and solution team
- Strong client service orientation
Jobs Summary
- Job Level
- Associate / Supervisor
- Job Category
- IT and Software
- Educational Requirement
- Bachelor's degree graduate
- Recruiter response to application
- Once in a while
- Office Address
- Gateway Business Park, General Trias, Cavite City, CALABARZON, Philippines
Feel secure when applying: look for the verified icon and always do your research on a company. Avoid and report situations when employers require payment or work without compensation as part of their application process.
About Maxim Integrated
Maxim Integrated is a highly successful, $2.4 billion company. With offices and manufacturing sites around the world, we design award-winning semiconductors that make the world more integrated. We also know that it’s our people who make us a great company. So we reward bold thinking, teamwork, personal growth, and community involvement. Want to make a difference and be challenged every day?
Join us at Maxim Integrated. With analog integration, the possibilities are endless.