Senior Application & Product Security Architect (Remote) at ID.me | Torre

Senior Application & Product Security Architect (Remote)

Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Full-time

USD75.4K - 100K/year

~COP150M - 200M/year

+ Equity

+ Bonuses

location_on
Remote (anywhere)
Posted about 3 years ago

Responsibilities


ID.me simplifies how people securely prove and share their identity online. The company empowers people to control their data through a portable and trusted login. ID.me is a credential service provider compliant with federal standards for digital identity verification. The company’s “No Identity Left Behind” initiative strives to expand access and inclusion for all people. ID.me is looking for a Senior Application and Product Security Architect to add to our growing security team. As ID.me continues to expand at a rapid pace, we need strong security professionals to help build highly scalable and secure products. Our Senior Application Security Architect will have the opportunity to provide thought leadership in the areas of secure software development, deployment pipelines, testing practices, and product vulnerability management. Responsibilities: - Assist in the development and maintenance of secure software development lifecycle methodologies and pipelines to ensure security is part of every phase of development and deployment - Support the creation and deployment of a rigorous threat modeling methodology to be used as a foundation for risk management, development priorities, and testing schedules - Brainstorm opportunities to improve time to market by improving the efficiency and effectiveness of the product and application security process - Influence and participate in activities to support theIntegration of security controls throughout the SDLC - Perform design reviews of new applications and products - Provide developer education and awareness about secure coding principles - Participate in the security testing efforts against our applications, including code reviews, black/white box testing of applications, and maintaining a continuous testing methodology