Senior Security Architect

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

Position Summary

Thales Cyber Security Products (CSP) is securing the world’s cryptographic infrastructure - the keys, the algorithms, and the business logic. We are safeguarding some of the biggest names in technology, and are securing over 80% of the world's banking transactions.

Security Architects in the Product Security Group are part of a global team supporting product development as subject matter experts in topics such as threat modeling, security architecture, secure coding, cryptography, and vulnerability assessment. We assist in all elements of product security; help teams make risk-based decisions; and educate and elevate the security maturity of the teams in a manner that will scale.

Key Areas of Responsibility

• Function as a technical security architecture and security engineering resource primarily in support of teams building applications and services in the Data Security or Application Security product lines.
• Work closely with security champions and product teams to enable and support risk-based decision-making that pragmatically balances security, performance, and compliance to ensure that products are not just secure, but usable for real world use cases.
• Educate the engineering organization to improve their security maturity, awareness, and judgement during all phases of product development.
• Contribute to the development of a high-quality product security program to help address CSP’s top product security priorities, including research, selection, and implementation of tooling and process improvements.
• Act as a mentor to Security Champions and Security Architecture Team members.
• Research and provide analysis on security trends, products, and the evolving threat landscape.
• Explore security topics that interest you and develop your skills in those areas.

Minimum Requirements: Skills, Experience, Education, Technical/Specialized Knowledge, Certifications, Language

• Bachelor’s degree in information security, information technology, computer science, computer engineering or another equivalent field of study; or equivalent work experience.
• 9-14 years of experience applying security skills to solve challenging security problems using knowledge and/or skills in multiple security domains, including threat modeling/risk assessment; applied cryptography; cloud security; and tool development, usage, configuration, and deployment
• Experience building tools, products, or services in at least one high-level programming language, and ability to read (and identify security flaws in) languages such as C/C++, Java, or Go.
• Ability to collaborate successfully in a team environment, be sensitive to needs of the teams, and effectively develop relationships across disciplines.
• Demonstrated verbal and written communications skills.

Preferred Qualifications

• Master’s degree in information security, information technology, computer science, computer engineering or another equivalent field of study; or equivalent work experience
• Smarts, curiosity, humility, and a positive personality; an open-minded approach to work; and equal willingness to both learn and teach.
• Strong desire to help develop members of the security community, both within the team as well as across organizational boundaries.
• Experience in one or more of the following domains:
  • Professional software development, modern programming and frameworks, and agile development practices
  • Developing, deploying, and/or automating security tools to identify security flaws in products.
  • Web application security technologies, frameworks, protocols, API Security, mitigation techniques, and potential pitfalls.
  • Security testing, CICD Pipelines, and automation
  • Cloud deployments, GCP and/or AWS cloud platforms, cloud technologies such as Kubernetes, and relevant security concepts.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference - for a safer, greener, and more inclusive world.