Skybox Security is looking for an experienced and knowledgeable Product
Security Leader to join its R&D team. Skybox Security provides the most
powerful risk analytics and security posture management for cybersecurity,
giving security management and operations the tools they need to eliminate
attack vectors and safeguard business data and services.
The Product Security Leader will report to a Director in R&D management.
Responsibilities
Responsibilities
* Define and periodically update Skybox product security policies
* Oversee the implementation of and adherence to Skybox security processes
* Verify the operation and monitoring of Skybox automated security tools
* Drive dynamic and static security assessments of the product with external contractors
* Work closely with the development groups to verify the timely solution of security issues discovered within Skybox published SLA
* Assist in verifying that compliance obligations from the product are fulfilled
* Assist with answering compliance questions on the product from customers
* Stay up to date with the latest security technology, trends and major vulnerabilities
* Overall responsibility on the security training and education of Skybox developers
Requirements
Desired Skills and Experience
* 3 years of experience as a Product Security Expert or similar role
* Good technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls
* Knowledge of potential attack vectors such as XSS, injection, hijacking, social engineering, and so on
* Knowledge of networking protocols, such as TCP/IP, and authentication protocols
* Knowledge and experience with HTTP and HTTPS, as well as their underlying implementations
* Basic programming knowledge
* Knowledge of Agile Development processes. Development experience – Advantage.
* Critical thinker and problem-solving skills
* Experience with engaging with external Security assessors and mitigation of security assessment reports
* Great communications skills, orally and written technical English
