Job Description

REQ ID: 118112
JOB TITLE: Senior Security Architect
SALARY: Competitive
POSTING END DATE: 28/09/2023
LOCATION: Manchester

JLR is harnessing technology to make driving smarter, safer and cleaner. You can help create a world in which responsible, sustainable vehicles revolutionise the driving experience for generations. Our vision is to leverage the incredible potential of technology to build vehicles that not only offer a premium, all-encompassing digital experience, but that also make our customers lives better.

THE OPPORTUNITY

We are looking for someone who will help us realise our business vision for a resilient IoT platform that will provide our customers, suppliers and partners with seamless connected services delivered through an industry-leading global platform that will generate new income streams for our business and help drive down costs through the use of data analytics.

Our Security Architects work closely with stakeholders to define and evolve system security architectures that are secure by design. You will be a valued member of our Offboard Cyber Security Chapter reporting in to Offboard Security Architecture Chapter Lead, contributing to the strategic direction of the technology and solutions delivered.

As a Senior Security Architect, you will work in conjunction with solution architects, product owners, technical leads and embedded security champions to identify the security risks associated with our products using application security threat modelling. You will collaborate with stakeholders to identify secure architectures, best practices and requirements that enable us to deploy secure systems at scale. You will support our engineering teams through their security assurance journeys working to identify security assurance testing regimes that are aligned with our products.

WHAT TO EXPECT

This role sits within the software development centre for digital engineering in Manchester and would suit those who are technically minded; be that from a security background or those with a Technical Architect/Software Engineering background. We are looking for a self-starter, keen to work in a highly collaborative manner supporting our engineers and product teams as we deliver a connected data platform for the luxury vehicles of the future.

Some of our Security Architect\'s responsibilities include:

• Providing consultation to product teams in security architecture and design, and conduct security reviews of new and existing products and services
• Conducting and reviewing threat models to identify security risk
• Continual collaboration with stakeholders with a view to being a key part of the product delivery teams\' success
• Maintaining strong knowledge of current security threats, mitigations and operational security best practices
• Providing security training, outreach, and guidance to our internal development teams
• Supporting the analysis of business requirements and their interpretation into security deliverables

WHAT YOU\'LL NEED

This is a senior role within our team, you will be guiding, coaching and supporting our engineering teams along their cyber security journey. As such a strong technical background, excellent communications skills and a desire to work collaboratively to influence technical decisions are a must.

Essential:

• A background in software engineering, with good knowledge of DevSecOps
• Strong knowledge of application security threat modelling and security risk management
• Experience implementing SDLC process, technology, and automation in a DevOps environment; ideally making use of OWASP best practice
• Experience of security architecture within agile delivery frameworks e.g. scaled agile or scrum
• Experience with large-scale web applications and backend services, including API design, access management, authorization, authentication, data protection and encryption
• Solid understanding of common application and infrastructure security vulnerabilities and mitigations
• Solid technical foundation (Computer Science / Engineering degree or equivalent) with a business-savvy mindset and an ability to translate technical vulnerabilities into business risks for senior leadership
• Experience deploying global solutions in the cloud

SO WHY US?

Bring all this to the home of premium innovation, and you\'ll find the opportunities to further your career with a world-class team, a discounted car purchase and lease scheme for you and your family, membership of a competitive pension plan and performance related bonus scheme. All this and more makes JLR the perfect place to continue your journey.

This role may offer the opportunity for hybrid working where you can split your time between working from home and in the office. At JLR, hybrid working is a voluntary, non-contractual arrangement providing employees with more choice and flexibility around how, when and where they work, if suitable for their role. Further details can be discussed with the Hiring Manager at interview stage.

Please be aware that we may close this vacancy for applications before the stated deadline if we receive a high volume of interest. We strongly advise you to submit your application as early as possible.

JLR is committed to equal opportunity for all.

Jaguar Land Rover