Head of Middleware Platform - #2159678

Experience 5 plus Years across multiple Middleware Technologies

Responsibilities

• Define and maintain secure configuration baselines for enterprise middleware platforms
• Collaborate with middleware SMEs to establish security standards and configuration requirements
• Design and implement automated compliance checks and configuration scanning controls
• Provide remediation guidance to IT Service Owners for identified configuration and control gaps
• Ensure configuration compliance data is shared with relevant governance and baseline management teams
• Define and maintain the middleware capability strategy in collaboration with Architecture Security and Control Owners
• Maintain and prioritize the capability backlog based on business value security risk and operational objectives
• Evaluate new technologies and practices that may affect middleware capabilities or the control environment
• Monitor platform capability performance through agreed indicators metrics and management reporting
• Provide technical oversight of control issues including assessment of control defect severity
• Collaborate with Service Owners to understand service performance exceptions customer feedback and improvement roadmaps
• Work with Technology and Platform Owners to address service health technical debt vulnerabilities and significant defects
• Lead delivery partners and technical teams to achieve platform security and capability objectives
• Engage stakeholders across the organization to understand security requirements and expectations
• Drive continuous improvement of middleware security compliance service quality and platform resilience

To be successful in this role you should have

• 5 years of indepth experience across multiple enterprise middleware technologies
• At least 2 years of experience leading or managing a technical team
• Strong knowledge of middleware platform security and secure configuration practices
• Experience defining and implementing secure configuration baselines
• Strong understanding of Center for Internet Security CIS Benchmarks
• Experience with configuration compliance scanning control assessments and remediation
• Strong stakeholder management and crossfunctional collaboration skills
• Ability to translate complex technical and security concepts into businessfriendly language
• Strong capability strategy backlog prioritization and roadmap management experience
• Excellent analytical troubleshooting and problemsolving skills
• Customerfocused consulting and service management approach
• Ability to adapt to changing priorities and empower technical team members
• CISSP or a similar cybersecurity certification is desirable

Skills

Mandatory Skills : Application Security (application security framework/ threat modelling/ Secure SDLC/ DevSecOps/Application Security Architecture Review), Application Security DAST & Penetration Testing - review/ Implementation/ Scanning/ Secure Code Review/ OWASP/ Remediation Advisor/ Secure SDLC