Security Technical Product Manager

Murex is a global fintech leader in trading, risk management and processing solutions for capital markets.

Operating from our 19 offices, 3 400 Murexians from over 65 different nationalities ensure the development, implementation and support of our platform which is used by banks, asset managers, corporations and utilities, across the world.

Join Murex and work on the challenges of an industry at the forefront of innovation and thrive in a people-centric environment. You’ll be part of one global team where you can learn fast and stay true to yourself.

The Team

The Platform Technologies group drives the evolution of the MX.3 technical capabilities aligned with market standards and customers' expectations. It’s an end-to-end organization that aims to address the technical and technological challenges of the MX.3 platform.

To answer the different platform wide challenges, the group is organized into domains that are composed of developers, product managers, architects and experts.

Part of this Platform Technologies group, the Security Domain's mission is to:

• Ensure the security of the platform to meet market standards and client requirements,

• Ensure the security of the internal Software Development Lifecycle,

• Product manage and develop security and IAM components of the MX.3 platform.

The Security Domain is made up of technical product managers and engineers from different seniority levels. Team members are in contact with many development and support teams from all the offices of Murex and in direct contact with customers.

The open position is within the Security Domain as Security Technical Product Manager.

Your Responsibilities:

As a Security Technical Product Manager and member of the Platform Technologies team, you will serve as a liaison for the security domain between MX.3 customers and customer-facing teams (Presales, Production and Architecture Consultants, Operators, Product Evolution Services, etc.), engineering teams (part of SAFe Agile Release Trains) and external security technology partners. You’ll also:

• Collaborate with cross-functional teams to define technical solutions, requirements, and architecture for new security focused capabilities (Identity and Access Management, etc.) of the MX.3 platform.
• Collaborate with stakeholders to define features scope, acceptance criteria, timelines, and deliverables.
• Build expertise on MX.3 product and internal processes, especially expertise on security components of MX.3 and the Secure Development Lifecycle (SDLC) of MX.3
• Analyze requirements and ensure their alignment with the security market best practices.
• Analyze software security regulations and standards (e.g. OWASP Top 10 Web Application Security Risks) to identify product gaps and evolution opportunities.
• Own security initiatives and product features by reviewing or producing the requirements and specifications for MX.3 Platform, its Development Lifecyle, its supporting production chain and operating environment.
• Drive execution of security features through delivery, actively removing impediments to keep work on track.
• Work with the different delivery teams to ensure that they understand the requirements and specifications.
• Analyze the impact of the proposed features on MX.3 Platform, develop use-cases to explain and demonstrate requirements to development and tech teams.
• Assist the testing teams to ensure that security requirements can be easily translated into test plans and ensure that the proper security testing plans have been completed.
• Review internal projects to analyze security threats and risks and enrich security requirements.
• Providing support to internal (L1) and external customers (L3) during the different life-cycle phases of the MX.3 platform (from presales to solution design to implementation to production),
• Analyze complex L3 support requests and collaborate with internal stakeholders for their resolution (reported bugs/issues, vulnerabilities, questionnaires, etc...)
• Identify opportunities for product evolutions through support channel.
• Act as Product Manager within an Agile Release Train (ART), participating in Agile events and driving the definition and prioritization of security features within the backlog in alignment with the platform security roadmap.

Your Profile

You should have a strong technical background in enterprise distributed systems and security best practices, in addition to a proven track record in driving product evolution from problem definition to solution definition, execution, and delivery.

Qualifications:

You should have a strong technical background in enterprise distributed systems and security best practices, in addition to a proven track record in driving product evolution from problem definition to solution definition, execution, and delivery.

Qualifications:

• Bachelor’s or master’s degree in engineering or computer science or similar discipline.

• 8+ years of experience as a software developer, architect and/or software product manager, or 5+ years of experience in software security or identity and access management-related role.

• Good knowledge of enterprise distributed systems and cloud architecture concepts, and fundamental design principles for building secure and scalable applications.

• Good knowledge of product security (digital identities, authentication, authorization, regulatory compliance, cryptography, data protection, API and cloud security, zero-trust architecture principles, threat modeling, etc.)

• Strong understanding of non-functional requirements, including service availability, security, business continuity, scalability, performance, and overall product quality.

• Proven experience in delivering software features from POC to Production.

• Collaborative mindset and strong communication skills, including strong writing skills covering functional and technical concepts.

• Ability to continuously learn in an evolving technology domain

• Ability to work under pressure and manage ambiguity

• Autonomous, rigorous, analytical and synthetical mind.

• Fluency in written and verbal communication in English. (French in a plus).

What will make you stand out:

• Previous work experience in identity and access management in distributed software systems.

• Previous work experience in designing and implementing security features in large distributed systems and cloud environments.

• Working experience in software authentication mechanisms (OIDC, SAML, LDAP, etc.)

• Working experience in cybersecurity threat modeling.

• Deep understanding of authentication and authorization across hybrid-cloud environments.

• Cybersecurity or cloud security certification (AWS or Azure).