14 feb
Thomson Reuters
Xico
.As an employee at Thomson Reuters, you will play a role in shaping and leading the global knowledge economy.
Our technology drives global markets and helps professionals around the world make decisions that matter.
Whether solving for today's challenges or tomorrow's aspirations, you will work with the industry's brightest thinkers on diverse projects, creating next-generation solutions that deliver powerful results.
As the world's leading provider of intelligent information, we want your unique perspective to create the solutions that advance our business—and your career.
**About the Role**:- As _"**_Product Security _**_Associate Architect" _**_you will:_- Use your overall technical security expertise as well as your evangelism skills to ensure successful delivery of our cross-functional product security initiatives.
Your primary responsibilities include the following:- Lead and energize our global security champions' initiative that represents hundreds of engineers globally.
The program is cornerstone to our Product Security mission to make a deep global and sustainable impact on our security posture.- Strategize, plan, develop the program's initiatives to meet our overarching product security objectives.- Identify and document requirements from our champions to inform strategy.- Develop reporting/dashboarding to report on the engagement of security partners and the health of the program (OKRs), through meaningful metrics.- Act as our primary liaison person between security partners and product security core teams.- Bring visibility and strengthen communication across teams.- In collaboration with our Software Engineering team,
partner with our Product and Product Engineering teams to bake the integration of security requirements in our products development lifecycle in-band of teams' ways of working and improve the Developer eXperience (e.G., developers tooling, threat modeling, automated analysis, offensive testing/purple team, software supply chain security).- Conduct ad-hoc and continuous security maturity assessments at scale (e.G., based on known frameworks like OWASP SAMM) and help with our threat modeling endeavors.
**Secondary responsibilities**:- Participate in developing our product security training program targeting development, cloud, cloud native technologies.
Examples include threat modeling training, organizing CTFs (and building anything that's required to run it), development of custom labs and partnering with our Security Awareness team.
**About You**You're a fit for the "**_Product Security _**_Associate Architect"_** role if your background includes:- Clear and compelling written and verbal communication; you are an evangelist.
You need to build attractive, sustainable security initiatives and maintain interest among a lot of competing priorities.- Worked with OWASP SAMM or BSIMM on large scale maturity assessments
Muestra tus habilidades a la empresa, rellenar el formulario y deja un toque personal en la carta, ayudará el reclutador en la elección del candidato.