id: NDk2OTY2MyA3

reference: 4969663

documentId: 4969663

connectionPointId: 7

lastModificationDate: 1554294635880

stillingsbetegnelse: Senior Security Product Manager

jobbeskrivelse:

Sitecore is the global leader in experience management software that combines content management, commerce, and customer insights. The Sitecore Experience Cloud™ empowers marketers to deliver personalized content in real time and at scale across every channel—before, during, and after a sale. More than 5,200 brands—including American Express, Carnival Cruise Lines, Dow Chemical, and L’Oréal—have trusted Sitecore to deliver the personalized interactions that delight audiences, build loyalty, and drive revenue. 

Sitecore is experiencing spectacular growth all over the world. To build on Sitecore’s success and growth, we need more people to join our team. We are currently looking for a highly skilled and experienced Senior Security Product Manager to drive security and compliance requirements across Sitecore’s suite of products and services.

 

Position Summary:

The role covers the following specific areas:

• Develop a long-term vision and product strategy for the evolution of platform security based on current and anticipated trends
• Influencing the Product Management & Engineering teams in understanding overall product security strategy
• Empathizing with risk-sensitive customers concerned about issues such as online threats, data safeguards, information security regulations, security incident handling, etc.
• Engage with strategic customers to better understand the data protection and encryption product landscape in which products are used
• Understanding the current threat landscape and abuse trends across the web
• Authoring functional specs and business requirements related to systems and features to detect and stop intrusion and fraud on our platforms.
• Partnering with engineering on design and implementation of scalable solutions to privacy, security and care issues.
• Being a ‘Subject Matter Expert’, by understanding prospects and customers, delivering strategic assessments and benchmarking against market expectations.
• Delivering Demos, Technical Presentations and Workshops for key stakeholders in the business.

 

Key tasks include:

• Working closely with specific technology partners to understand the features and functionality available for a successful integration.

• Determine the required functionality to be enabled, built and tested to address the required opportunities and needs.
• Perform threat modeling and attack surface analysis
• Collaborating with the engineering team or teams by providing clear feature specifications and business context, in conjunction with technical dependencies.
• Set priorities for engineering based on features and use cases, to cover all security and compliance requirements.

• Working with Sitecore’s cloud services and development teams to implement security best practices through the product life-cycle, including identifying and retiring existing vulnerabilities.

• Strategic roadmap planning and dependency mapping as part of an overall product delivery program.
• Drive the development of hardening guidelines for Sitecore’s commercial products
• Respond to questions from sales RFPs
• Participate in customer calls when needed, respond to requests from Sales Engineers and Technical Services when required
• Ensure our product offering complies with relevant legislation and standards associated with our global markets.
• Work with internal stakeholders across the company to explain our value proposition as well as working closely with key customers and partners to continually improve the product offering.

 

Ideally you will have:

• A keen understanding of all the elements which make up a secure, robust and compliant product integration with a customer centric view.
• Recognized domain expertise on web-technologies, working and integrating with multiple 3rd party APIs
• Knowledge of working with cloud-based systems, deployments and industry standard authentication and data exchange APIs (ETL tools).
• Understanding of Microsoft SDL framework, privacy by design principles, OWASP Security by Design Principles, ISO security standards
• Knowledge of enterprise deployment, configuration and upgrade
• Familiarity with software development processes (Agile, SAFe, Scrum)
• Experience working with or managing API-based products
• Experience working in a SaaS delivery model
• Knowledge of Enterprise Authentication and Web Security, Secure Coding Techniques, Public Key Infrastructure (PKI), Certificate Management, Endpoint Detection & Response, Advanced Threats.
• Experience working with Responsible Disclosure & CVE processes
• A demonstrated ability to deliver products as outlined above

 

You should have:

• BS or BA in computer science or related degree
• 4+ years of product management, project management, and/or experience in a technology focused business
• Completion of a full product lifecycle (Idea, Verification, Delivery, Release)
• Self-motivated and willing to go the extra mile
• A creative thinker with skills in critical analysis
• Superior attention to detail in developing product documentation and analyses
• Effective customer communications, especially for internal customers
• Superior verbal and written communications skills
• Experience with some or all the following standards
  • Payment Card Industry PCI DSS
  • HIPAA
  • Common Criteria
  • FIPS 140-2
  • FedRAMP
  • SOC 2
  • Federated Authentication
  • GDPR
  • ISO 27001, ISO 27018

 

Location:

• Copenhagen, Denmark
• London, United Kingdom
• Other locations depending on strengths of candidate

 

Sitecore is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status or any other legally protected basis. 

Sitecore is proud to be an equal opportunity workplace. We are committed to equal employment opportunity without unlawful regard to race, color, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status or any other local legally protected characteristic.

numberOfPosts: 1

jobCategoriesCodes_0: http://data.europa.eu/esco/isco/C1321

abstractJV_contact_0: Please apply using one of the specified channels

positionTypeCode: directhire

contractTypeCodes_0: fulltime

Arbejdsgiver Navn: SITECORE CORPORATION A/S

source: DK-STAR