Job Description

Summary

The ODP Corporation is looking for a Lead Cybersecurity Engineer - Application Security to design security controls and validate that our services, applications, and emerging technologies are designed and implemented to the highest security standards. The Lead Cybersecurity Engineer is a hybrid role combining key aspects of Security Architecture and Engineering.

This position requires the candidate to possess business insight, technical acuity, and the ability to think, communicate and write at various levels of abstraction. This position contributes to improving our Information Security program through formal Information Security Architecture processes that deliver consistent, optimal and resilient solutions that satisfy the business requirements in a secure manner. This position requires work on multiple projects as a project leader or as the subject matter expert and is expected to coach and mentor junior technical staff.

Primary Responsibility

• Analyze the security of applications and services; discovers, and addresses security issues; builds security automation; takes action to mitigate emerging threats throughout a full secure development lifecycle.
• Serve as security expert in application development, database design, network and/or platform (operating system) efforts; ensures project teams comply with enterprise and IT security policies, industry regulations, and best practices.
• Ensure security architecture standards and solutions meet business objectives and regulatory compliance requirements.
• Provide a leadership role in the development, implementation and maintenance of consistent application and infrastructure architecture security programs.
• Evaluate third party products and services to verify that they meet security standards and will integrate seamlessly and securely into the IT computing architecture.

Minimum Requirements

• Bachelors degree in MIS, Cybersecurity, or other technical focus; or equivalent experience
• 5+ years' experience in Information Security
• 10+ years combined IT and security work experience, with a broad exposure to application, infrastructure, network, and multiplatform environments
• Professional security certification: CISSP, CISM, GIAC, GWEB, or other similar credentials.
• Deep technical understanding of the OWASP Top 10
• Experience building/reviewing threat models, conducting security assessments, Git source code management, CI/CD pipeline automation, API design consuming service endpoints, Kubernetes and/or Docker, one or more programming languages (such as Java or Golang)
• Understanding of networking and communication protocols (TCP/IP, UDP, SSL/TLS, IPSEC, HTTPS, BGP), cryptography, web service frameworks, mobile app architectures and service architectures (event-driven, service-oriented, or serverless architectures)
• Familiar with reverse engineering or vulnerability research; physical, infrastructure, and hardware security
• Able to communicate deep technical issues in terms of business risk with non-experts and senior leaders

Equal Employment Opportunity

Office Depot and OfficeMax is committed to providing equal employment opportunities in all employment practices. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, lactation and related medical conditions), gender (including gender identity and expression), ancestry, national origin, citizenship status, marital status (including registered domestic partnership status), age, physical or mental disability, medical condition, genetic information, military and veteran status, sexual orientation or any other characteristic protected by federal, state or local law.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.