App Security Lead

Position Summary

Role and Responsibilities

Security Engineering Lead 

Samsung Ads focuses on enabling brands to connect with Samsung audiences across all devices. As an international company, Architects at Samsung work on big complex projects with stakeholders and teams located around the globe.

Our purpose is to deliver unparalleled results for our customers. Samsung Ads uniquely transforms the advertising landscape by using comprehensive data to build the world’s most intelligent connected audience platform. We deliver on Samsung Electronics’ 51-year commitment to excellence through smart, easy, effective advertising solutions to make advanced video advertising work.

What you will do

As a Security Engineering Lead, you take full ownership of the application security program and provide technical leadership to the security team. In addition, you shape organization-wide application security best practices, resolving complex security issues, and participating in technical conversations with software developers to answer complex security queries and collect new security requirements. You act as a coach to engineering teams and security champions in an effort to improve the overall security of Samsung Ads products. 

You will also be responsible for working with the Director of Security Engineering to foster a proactive relationship with the HQ security team, based in Korea. This partnership is to drive requirements alignment and balance of technical innovation for Samsung Ads with an industry best security posture.   

There will also be an opportunity to directly contribute to the overall Application and Data Protection program and lead cloud security technology around cloud application and data monitoring, reporting and auditing controls. This role plays a key role in securing proactively Samsung ads products. You are involved during all stages of the software development lifecycle and work closely with product and software development teams to model threats, scan for vulnerabilities, identify required control points in the application stack , and pen test early software, systems, and network architectures. 

You will work with some incredibly talented and passionate developers with a solid technical background to bring products and services to a market with unique technical challenges.

Key Responsibilities

• Perform app security reviews, outlining requirements, verifying remediation, threat modeling, data migration, etc

• Assist our engineering teams in building security-first software and infrastructure. 

• Perform threat analysis and security audits on our software and infrastructure

• Define hardening configurations standards

• Configure web application firewall policies to protect public web systems

• Contribute to define and enforce security standards for Cloud Native applications, firewalls, AWS configuration and more 

• Participate in security reviews of service architectures and act as Subject Matter Expert for engineering teams

• Develop a platform to enable engineering teams and corporate teams to understand their vulnerabilities and risks and support their remediation efforts

• Develop policy and documentation for security best practices for technologies new to the company and produce metrics and reports on the cloud security posture of our systems

• Research new technologies and methodologies related to application security and identify how Samsung Ads can adopt them

Required Skills And Experience

• Strong analytical and communication skills

• Ability to work on their own with self-motivation and be able to motivate their team members 

• Ability to divide a bigger task into smaller segments, delegate tasks, and follow up effectively; ability to ensure tasks are completed as specified without micromanaging

• Eagerness to learn new technologies, and a passion for application security

• Expert on OWASP Web Top 10, and threat modeling using well-known frameworks such as STRIDE

• Strong development skills and proficiency in at least one programming/scripting language and strong knowledge of AWS, Linux, SIEM<