Roles by discipline
Security roles with a seat in the design review
This title can describe very different jobs. Sometimes you are in the design review and things get built differently because you were there. Elsewhere, you produce evidence that things were built, after they were built. Each is real work that needs doing. The ad needs to say which kind of work it is offering, so we ask.
What we ask before we post one
The questions the ad never answers.
- Does security join design reviews, or receive the design at the end?
- What share of recent work went to detection and prevention, and what share to audit evidence?
- Can security block a release, and has that actually happened?
- Is there a budget line for automation, and what has it bought?
- Who owns identity, and is that a named person?
- What was the last incident, and what changed because of it?
What we will not post
We do not post compliance paperwork described as security engineering.
For hiring teams
Hiring for this discipline?
We work through the role and hiring criteria with your team as part of embedded recruitment. Talk to Jonathan about what you need to hire.