Principal Embedded Security Engineer

There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!

About the Role

OutSystems' embedded Security Engineer will work directly with Product Engineering Teams to enable Security solutions to be embedded within the product, workflows, and support functions of OutSystems. The embedded Security Engineer will guide and supplement the Engineering teams in regards to requirements related to Security functions, up to and including product specific implementation guidance, creation of tools and services to ease the integration with security and regulation compliance, and support.

Embedded Engineer will be a part of the Product Security group, however focused on assisting areas of Engineering with a security first mindset and mission. This will enable Engineering teams to interact with an as needed allocation member to their group allocated on a time bound basis to assist in guiding and implementing  security related requirements  while focusing on product delivery.

The embedded security engineer will guide, train, and assist in  Threat Model creation for the Engineering groups, assist in security assessments of the assigned component or service, supply the Governance, Risk, and Compliance team with audit evidence for the related services, document and inform Engineering teams on what is expected of them, assist Product Management and Support in regards to Customer questionnaires, wants, or requirements.

How will you know if you’re successful?

You have the ability to bridge the gap between Security and Engineering implementation of services and functions, reduce friction within Engineering groups by assisting them with security specific projects and creating new services or security approved standard paths of services to be utilized, understand how security requirements tie into specific service settings and implementation, are able to cohesively build a security relationship with Engineering, Support, and Solution Architecture groups.

Items assigned to the Embedded Security Engineer will be determined for success if they’ve been completed on time, to the definition of done, system requirements are implemented, and satisfaction is agreed upon by Engineering, Product Management, or Support.

Job Duties:

• Threat Modeling consulting and Security Assessments

- Conduct detailed threat modeling consulting and security assessments of critical assets within our organization.

- Regularly update threat models to reflect evolving threats and changes in the business environment.

• Develop and implement Software Security solutions for the Product ecosystem, including but not limited to component specific services.

• Drive execution across multiple Engineering Teams, with help from the Program Management, Solution Architecture team by integrating with the team, training the members, performing changes where applicable, developing services to make the security development lifecycle easier on the development team. 

• Define, advocate, and Agree on product-level requirements/goals with the Product team as they relate to security.

• Contribute to technical requirements, architecture, and interface design documents.

• Ensure that security requirements are adequately addressed throughout the development and acquisition life cycles for all assets, services, or functions.

• Perform certification and accreditation before releasing new systems and software into production

• Improve security posture via both direct implementation and recommendations to other teams

• Expertise related to Products specific services given to Senior Leadership as a guiding light to making business decisions

The Longer Story:

One of the fastest-growing B2B software companies in the world, OutSystems is on a mission to enable every organization to innovate through software. We are looking for talented and motivated people to join us in helping companies solve some of their most strategic business challenges, from modernizing their workplace processes to transforming their employee and customer experiences. As a member of the OutSystems global team, you will help build, deliver, manage, and evolve the software that is a low-code market leader and preferred by professional developers around the world.