Job Description

The Opportunity: 

Open to 100% remote 

The Principal Security Architect/Engineer is an individual contributor who will participate in all aspects of security design and implementation across Mattel. This is a crucial position to advance the information security posture for the organization’s products, solutions and systems. This high visibility role includes collaborative Design Reviews, Threat Modeling, Security Requirements, Secure SDLC, Vulnerability Assessments and Security Risk Analysis. With an emphasis on secure cloud architecture the candidate must have experience and working knowledge performing security assessments on both internal and cloud systems, wireless, web applications, as well as SaaS/PaaS system integrations. The candidate will need to be able to work in an autonomous manner with minimal oversight. Further, this candidate is expected to be able to provide strategic roadmaps that they will be executing on and have the ability to track progress with supporting metrics effectively. Excellent customer service and written/verbal communication skills are critical for this position. Strong technical and problem solving and troubleshooting skills is required.

What Your Impact Will Be: 

Collaborate with engineering teams to perform advanced security analysis on complex cloud systems, identifying gaps while contributing to design solutions and security requirements.

Be a subject matter expert on information security for complex systems and applications in cloud environments.

Ability to analyze security gaps and trends, while identifying and creating appropriate mitigating security controls and standards.

Efficiently assess risk accurately while negotiating priorities with cross-domain stakeholders.

Design security reference architectures and implementing/configuring security controls with an emphasis on cloud technologies.

Develop and maintain strategic and tactical roadmaps and plans to accomplish key security objectives and initiatives.

Be a shared owner in the secure design of Mattel’s public cloud infrastructure ensuring that appropriate security controls are incorporated.

Build and expand the security architecture standards for both cloud and on-premise systems.

Manage security scanning tools (network, application, and cloud services) and maintain an in-depth knowledge of remediation techniques and mitigating controls.

Maintain a thorough understanding of security threats and attacks to identify potential vulnerabilities along with their appropriate remediations.

Perform secure code reviews identifying potential issues while providing appropriate remediations.

Define security metrics, along with KRI/KPI/KGIs, to communicate project status and implementation efficacy.