Roles

Architecture, threat modeling, escalations, training, overseeing and recruiting champions (Primary Function for which Role)

Software Security Architect

Central software security group; part of sign-off at each SDLC stage; involved from pre-commit to post-release (Role Placement for which Role)

Software Security Architect

Senior level; 5 to 10 years of development before security (Experience for which Role)

Software Security Architect

Ensure, and create as needed, security policies, processes, practices, and operations for reproducible, high-quality development (Which Role)

Software Security Architect

Embedded advocate; enforces the SDL; testing tools expert; eyes and ears of the central team (Primary Function for which Role)

Software Security Champion

At least one per business unit; ideally one per Tier 1 product (Role Placement for which Role)

Software Security Champion

3 to 5 years of development; must be a volunteer, not an assignee (Experience for which Role)

Software Security Champion

Champion in training; promulgates and enforces policy; evangelizes the SDL (Primary Function for which Role)

Software Security Evangelist

Surplus champion candidate in large organizations, waiting for a slot (Role Placement for which Role)

Software Security Evangelist

Promotes awareness of products to the wider software community (Which Role)

Software Security Evangelist

Facilitates process; removes impediments (Primary Function for which Role)

Scrum Master

Prioritizes the product backlog by value; makes decisions on requirements (Which Role)

Product Owner

Cross-functional, self-organizing; plans and re-plans its own work (Which Role)

Development team

Holds most responsibility in Waterfall; optimizes schedule and budget (Which Role)

Project manager

Set risk tolerance, priorities, funding, and accountability (Primary Function for which Role)

Executives and Product Leadership