Director, Security Architecture - DevSecOps

The Director, Security Architecture - DevSecOps will work closely with product teams to identify and aid the implementation of security solutions in all aspects of Information Security. This includes being able to assess and mitigate system security threats and risks, validate system security requirements, establish system security designs in software, data, and procedures, verify compliance with system security requirements, and perform system certification, testing, validation planning, and act as liaison with other departments and business units to support ongoing system security operations and maintenance.

As a direct report to the Head of DevSecOps, you will have the following responsibilities:

• Architect developing an automated framework for Security Tool deployment and development, leveraging various scripting languages and open-source solutions

• Architect, design and implement monitor security measures related to computer networks and software testing and validation procedures, programming and documentation

• Work autonomously in an area of specialization to analyze internal security and provide relevant information to internal and external customers, suppliers, and partners.

• Implement and design API Security, Container Security, AWS Cloud Security.

• Deep understanding of Amazon AWS services and AWS security.

• Experience with container security and threat detection, threat modelling using attack trees and various threat modelling tools

• Hands on experience securing cloud infrastructure (AWS)

• Hands on experience securing Docker and Kubernetes environments

• Working knowledge of the following tools/technologies; Git, Terraform, Ansible, Gitlab

• SDLC - version control, branching strategies, TDD/BDD, CI/CD, continuous monitoring

Requirements:

• Strong Development background with one or more tools / technologies

• CI/CD - Deployment pipeline experience (Jenkins, Ansible, Terraform)

• Familiarity with REST API design

• Programming language (Python, Java etc., - Hands on experience)

• Devops container/orchestration tools (Kubernetes, Docker, Puppet, etc)

• AWS Deep knowledge (Native AWS Tools, Custom tools)

• Log aggregation platform experience

• 8+ years in Information Security

What to expect from Pearson

Did you know Pearson is one of the 10 most innovative education companies of 2022?

At Pearson, we add life to a lifetime of learning so everyone can realize the life they imagine. We do this by creating vibrant and enriching learning experiences designed for real-life impact. We are on a journey to be 100 percent digital to meet the changing needs of the global population by developing a new strategy with ambitious targets. To deliver on our strategic vision, we have five business divisions that are the foundation for the long-term growth of the company: Assessment & Qualifications, Virtual Learning, English Language Learning, Workforce Skills and Higher Education. Alongside these, we have our corporate divisions: Digital & Technology, Finance, Global Corporate Marketing & Communications, Human Resources, Legal, Strategy and Direct to Consumer. Learn more at We are Pearson.

We value the power of an inclusive culture and also a strong sense of belonging. We promote a culture where differences are embraced, opportunities are accessible, consideration and respect are the norm and all individuals are supported in reaching their full potential. Through our talent, we believe that diversity, equity and inclusion make us a more innovative and vibrant place to work. People are at the center, and we are committed to building a workplace where talent can learn, grow and thrive.

Pearson is an Affirmative Action and Equal Opportunity Employer and a member of E-Verify. We want a team that represents a variety of backgrounds, perspectives and skills. The more inclusive we are, the better our work will be. All employment decisions are based on qualifications, merit and business need. All qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We strive for a workforce that reflects the diversity of our communities.

To learn more about Pearson’s commitment to a diverse and inclusive workforce, navigate to: Diversity, Equity & Inclusion at Pearson.

If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing ppsmhr@pearson.com.

Note that the information you provide will stay confidential and will be stored securely. It will not be seen by those involved in making decisions as part of the recruitment process.

Job: TECHNOLOGY

Organization: Corporate Strategy & Technology

Schedule: FULL_TIME

Req ID: 9418