https://www.linkedin.com/jobs/view/2417285115/?refId=cc30987a-cf4b-49c8-8619-c62296bc4dec

Principal Security Architect

HERE Technologies

Czechia, Europe

What is the role? HERE Security recognizes the amazing talent in the Eastern European region, and is making a strong investment in the Czech Republic and Romania, primarily in Brno, Prague & Bucharest. Eastern Europe is a complementary region to our already sizable European footprint, sharing the Central European Timezone with most of our other European sites. HERE has a diverse team of Security professionals and is excited to expand hiring in Eastern Europe! Security, Privacy, and Continuity (SPC) is a centralized organization that secures HERE products and services, ensures best-in-class security and privacy for customers and employees, and protects the organization against physical and virtual threats. SPC is a globally distributed team of security and privacy professionals and is growing to keep pace with HERE expanding business and customer base. Security Architects - The team You will join HERE’s team of Security Architects who are transforming how HERE’s security controls are mandated, implemented, maintained and monitored. We are building Continuous Security Controls Monitoring in cooperation with the other Security and Privacy teams, and using its enterprise-wide observability to influence technology investment and implementation decisions by Research & Development and IT. As HERE expands its industry-leading advantage in Location Services, we simultaneously present an ever brighter target for those who would abuse our capabilities and resources. Join a highly agile team at the nexus of HERE’s defenses and help keep the Internet a safe place to live and work. Teams with a diversity of brains, backgrounds, and personalities build more resilient solutions, so we prefer diverse teams at HERE, and strongly encourage non-traditional candidates to apply. Main Responsibilities: Influence leaders of teams to elevate the priority of security controls implementation when risk is overly high and, equally, advocate on behalf of risk acceptance when risk is sufficiently low given the business opportunities under consideration. Create software prototypes and automation tools that assemble data about system weaknesses to aid in understanding the scope and breadth of risk. Coach others in building threat models for HERE technology systems, which connect available threat intelligence to common attack techniques, and link those to their applicability to HERE systems. Author and/or curate guidance documentation that recommends how developers and engineers may quickly harden their systems.