Security and Compliance Specialist 12 Months Contract

we are looking for a Security and Compliance Specialist .

Our client is currently developing several new products that require them to meet their Cyber ​​Security regulations. The scope of this work has increased significantly in recent years and is becoming an increasingly vital part of our client's products.

In order to relieve our own developers, our client needs support in that work from an experienced software developer who has experience in Cyber ​​Security in the design and implementation of software and also experience in internal processes for secure software development. One of the main tasks is to support other roles within the organization with e.g. requirements, secure design and implementation, security testing and also product care in the form of handling security flaws.

The work includes the design and implementation of security solutions for desktop applications, embedded systems and cloud solutions (Abilities and Microsoft Azure). The software that appears in our products ranges from hardware-based firmware (VHDL, C, C++, Assembler) and PC-based software (C++, Java, C#) to cloud-based solutions (Azure).

The following duties are included in this role:

• Conduct review of Cyber ​​Security aspects at G2 and G5 in ongoing product development projects
• Implement/coordinate Cyber ​​Security activities within the projects

1. Conduct/coordinate DSAC testing
2. Conduct attack surface and threat model analyses
3. Conduct review of security-critical code
4. Create and harden Windows image

• Be well-read and consultative within our client's internal regulations for Cyber ​​Security
• Driving our client's new Secure Development Lifecycle (SDLC) regulatory framework and ensuring compliance.
• Participate in the requirements process to define security requirements
• Design and implementation of security solutions in product development (for e.g. desktop applications, embedded systems and Microsoft Azure).
• Drive processes for security updates and vulnerability management.
• Documentation of Cyber ​​Security aspects in various contexts (architecture, manual texts, process documentation, agreements...)
• Collaboration and communication with our client's Cyber ​​Security organization
• Participate and prepare projects for security reviews
• Global monitoring of vulnerabilities and security updates

Our client is looking for a person who is knowledgeable in the area of ​​Cyber ​​Security and who has experience working with it in line work and in the product development process. Collaboration is a central part of the role because you interact with many people in the organization, both in Sweden and globally to solve technical challenges and define safety requirements for products.

Requirements

Required skills

DSAC-tester

environmental monitoring

Cyber Security

Microsoft Azure

Secure Development Lifecycle

Languages

English