Description

The Cyber Security Solution Architect will be responsible for transforming the way Syneos Health protects applications, software and code that it uses to support the company to accelerate patient therapies to market and thereby increase cyber threat resiliency. This role will be a member of the Office of the CISO and a member of enterprise security architects. As a key subject matter expert and leader within the team, this role will use a data and risk-based approach to driving enterprise initiatives, formulating requirements, patterns, and solutions to achieve risk mitigation.

To be successful, this role will act as a technical influencer, build cross-functional and organizational partnerships to deliver modern security engineering and operational solutions. As an architect you will partner with the software engineering organization to design software security solutions, participate in proof of concepts and enable the engineering organization to deliver secure, operational solutions. The role will own the software security program and initiatives and be responsible for reporting on progress to leadership and stakeholders.

The scope of responsibility includes but is not limited to supporting the transformation of security engineering into the early phases of enterprise delivery through defined Secure SDLC, Source code management, application security, and the transformation of DevSecOps across the enterprise. The role will bring an everything-as-code security mindset to be applied across applications, APIs and platform engineering.

To be successful, the role will need to define and identify technical and business risks along with enterprise requirements that can be consumed by a shared-responsibility model for engineering and operational controls. Be a transformation agent by advocating for modern secure engineering principles and automation. Excellent oral and written communication skills, as well as effective organizational abilities, are essential due to the detailed and time-bound nature of the work and the extensive collaboration with others.

JOB RESPONSIBILITIES

• Mature and modernize the enterprise software security program and initiatives to manage risks and enable technology solutions:
  • Use a data-driven approach to identifying areas of risk
  • Publish metrics and KPI’s
  • Set enterprise requirements for secure software development based on common cyber security frameworks such as NIST, Hitrust, CSF, SafeCode, OWASP etc.
  • Contribute to enterprise security policies and standards.
  • Evolve Secure SDLC standards and processes
  • Define, own, and drive the company's software security strategy and roadmap, acting as the key security voice for software security
• Partner with software and platform engineering teams to:
  • Promote DevSecOps solutions and culture
  • Establish secure code management practices
  • Improve automated CI/CD pipelines with appropriate security services
  • Automate enterprise security requirements into backlogs
  • Champion cloud application and platform security engineering practices
  • Deliver enterprise security patterns for software engineering
  • Participate in Proof of Concepts with the software engineering organization
• Educate and drive engagement of modern secure software principles within the organization by:
  • Being a strategic advisor in software security
  • Being a transformation agent in promoting a modern security engineering mindset
  • Performing design reviews to identify security architecture flaws

QUALIFICATION REQUIREMENTS 
What we are looking for:

• Proven track record building and transforming secure software and platform engineering practices
• Building road maps and creating initiatives to address enterprise goals
• Experience partnering with engineering teams to achieve security goals
• Strong familiarity with source code management
• Strong familiarity with software exploitation techniques and Mitre @ttack framework
• Strong knowledge of cloud platform security (AWS, Azure, Oracle Infrastructure Cloud)
• Someone with strong engineering mindset and software engineering experience
• Experience implementing pipeline automation and source code management

Additional standout skills:

• Hands-on experience with modern engineering technologies such as Kubernetes and Containers
• Experience with securing Terraform or other IaC platforms
• Delivered secure coding practices to large engineering teams
• Familiar with API Security
• Enabling DevSecOps within large organizations

Education

• Security Architecture TOGAF/SABSA
• Cloud security certifications for OCI, AWS or Azure (Azure preferred)

At Syneos Health, we are dedicated to building a diverse, inclusive and authentic workplace. If your past experience doesn’t align perfectly, we encourage you to apply anyway. At times, we will consider transferable skills from previous roles. We also encourage you to join our Talent Network to stay connected to additional career opportunities.

Why Syneos Health? We partner with industry experts to solve and execute against today’s toughest commercialization challenges facing the world’s leading healthcare companies. The diversification and breadth of our new and existing partnerships create a multitude of career paths and employment opportunities on our Commercial Operations and Leadership teams. Join our game-changing, global company dedicated to creating better, smarter, faster ways to get biopharmaceutical therapies to patients. Experience the thrill of knowing that your everyday efforts are contributing to improving patients’ lives around the world. 

Work  Here  Matters  Everywhere  | How are you inspired to change lives?

Syneos Health companies are affirmative action/equal opportunity employers (Minorities/Females/Veterans/Disabled)