head of application Security principal engineerTechBridge Market

Job Description:
If you are passionate about playing a key role in the success of an Al-driven technology company, we want to hear from you!
Our client is a well-established brand in the IT services and consulting industry and they are looking for a highly skilled Head of Application Security to analyze software designs and implementations from a security perspective, and identify and resolve security issues. You will include the appropriate security analysis, defenses, and countermeasures at each phase of the software development lifecycle, to result in robust and reliable software.
As the Head of Application Security, you will lead a squad of (3-5) highly skilled application security engineers and will serve as the security expert and advisor for senior management on emerging threats, vulnerabilities, and security concerns. You will protect the data of millions of users, ensure new products and designs are architected safe by default, build monitoring and detection systems, work collaboratively with cross-functional teams to promote a security-first culture, squash vulnerabilities, and help us achieve our compliance and regulatory goals.
The role includes significant autonomy towards defining problem spaces and a mandate to build viable tools which are both internally - and externally facing. This is a great opportunity for someone who wants to have a large sense of ownership and make a fundamental impact on the business and the organization in a fast-moving hypergrowth fintech.
Our client's engineering team values agility, collaboration, and autonomy. They're building a team of not just strong problem-solvers, but great collaborators-engineers who are excited to teach and learn from each other, share decisions and information freely, and work together on new problems that no other companies have solved before. Come join the best people in the business.
This is an exciting opportunity to expand your skillset, and achieve job satisfaction and work-life balance.
Responsibilities:
Design, develop, and maintain Lob's core security protocols, policies, and services.
Present findings and explain impact and solutions to any level of leadership and other engineers.
Build out a comprehensive security roadmap.
Ensure compliance with relevant industry security standards.
Perform regular audits and patch vulnerabilities.
Evangelize and educate security best practices across the company.
Participate in the design of new services and infrastructure.
Create proper automation and monitoring to enforce security policies and detect threats.
Attract, hire and develop security talent.
Qualifications:
Proven work experience as a software security engineer.
7+ years of proven security experience with 3+ years in leadership roles, preferably in an environment where data/systems are in the cloud.
Detailed technical knowledge of techniques, standards, and state-of-the-art capabilities for authentication and authorization, applied cryptography, security vulnerabilities, and remediation.
Software development experience in one of the following core languages and/or frameworks: Java, Kotlin, (Micronauts, spring boot) Python, Javascript (Angular, React, Next, etc.), and native Mobile software development Android, IoS (Swift, ObjectC), etc.
Experience managing security and partnering with internal/external stakeholders in a high-consequence environment where critical customer/partner data is at stake.
Proven experience as a hiring manager and team-builder, leading and motivating cross-functional initiatives, and strong partnership with recruiting.
Thorough understanding of the current threat and attack landscape, latest security trends, and principles.
Demonstrated ability to effectively communicate complex security technology matters in an easy-to-understand manner to executives, teams, and individual contributors across the organization.
Experience designing/implementing controls to meet regulatory frameworks such as ISO 27001, SOC 2, GDPR, etc.
Advanced skills and knowledge of the following Technical Security and Security Engineering Topics are preferred:
SOC & CC
Security Event Information Management (SEIM)
Physical Security Information Management (PSIM)
Central Monitoring Station (CMS)
Emergency Communication Systems (ECS)
Integrated Platform Design & Architecture
ACCESS CONTROL
Physical Identity Access Management (PIAM)
Physical Access Control Systems (PACS)
Visitor Management Systems (VMS)
Digital & Analog Platform Topologies
Access Control Devices & Equipment
VIDEO SURVEILLANCE
Video Management Systems (VMS)
Closed-circuit Television Systems (CCTV)
Video Content Analysis Systems (VCA)
Digital & Analog Platform Topologies
Video Surveillance Devices & Equipment
INTRUSION DETECTION
Alarm Monitoring Systems (AMS)
Physical Intrusion Detection Systems (IDS)
Digital & Analog Platform Topologies
Intrusion Detection Devices & Equipment
THREAT PREVENTION
Technical Surveillance Countermeasures (TSCM)
Cryptographic Key Management Systems (CKMS)
Facial Recognition Systems
Fingerprint Authentication Systems
Iris Recognition System
Insider Threat Monitoring Systems
Adversary Emulation Devices & Equipment
SECURITY INDUSTRY
Marketing & Distribution Channels
OEMs
Security System Manufacturers
Distributors (Suppliers/Co-Ops )
System Integrators (VARs/Dealers)
Security Managers (End users)
Professional Associations
Benefits
Health insurance with 100% premium covered
Generous PTO / sick leave
Etc.
TechBridge Market

Makati City, Metro Manila
Permanent
Full-time