Principal Security Specialist

Overview

The Principal Security Specialist at Sage is responsible for driving improvements in the end-to-end product/system lifecycle across the SDLC and post-launch operations. The role focuses on security enhancements for major customer-facing products and internally developed applications.

Responsibilities

• Collaborate with Security Champions to strengthen team security capabilities.
• Enhance secure software development lifecycle and support DevSecOps transitions.
• Act as the main security contact for Product Delivery and EAD teams.
• Assess Sage products and systems for security weaknesses; develop improvement plans.
• Support security compliance with industry standards (e.g., SOC, ISO27001, PCI).
• Identify and evaluate new security tools and vendors.
• Drive improvements in processes and implement new security standards.
• Mentor junior team members and provide technical security leadership.
• Contribute to industry bodies, conferences, and open-source projects.

Skills & Experience

• Extensive experience implementing security in the software development lifecycle.
• Experience in public cloud based SaaS security implementation.
• Fluent in English, both written and verbal.
• Proven experience working with geographically dispersed teams.
• Experience in agile, DevOps/DevSecOps environments.
• Background in security operations and compliance frameworks.
• Professional security qualifications such as CISSP or CSSLP.
• Relevant degree with over 8 years of commercial experience.

Key Skills/Competency

• Security
• SDLC
• DevSecOps
• Compliance
• SaaS
• Cloud
• Mentorship
• Process Improvement
• Risk Assessment
• Tool Evaluation