Application Security Architect

Job: Application Security Architect

Location: 100% Remote

Job Description:

The Security Architect provides in depth technical security guidance and is identified as the security subject matter experts (SME) responsible for creating and developing capability-focused security solution architectures that are aligned to business and technology needs. Assists with maintaining security strategies, requirements, and standards for applications and platforms. Ensures architectures and patterns are aligned to company security policies, standards and industry standards. Able to identify gaps and work with project teams to improve security while retaining time to market, functionality and scalability. Assist with any reviews and approvals for Security Accreditation tasks during each phase of SDLC. Serves as project/program point of escalation for security issues and risks that may arise. Has a broad and deep knowledge in security areas such as application security, IAM, infrastructure, network, and security vulnerability management. This position may work as a dedicated embedded solution architect team member or across multiple projects/programs as may be required.
Required:

• Information Technology experience including security experience in conducting security reviews and accreditation.
• 2+ years experience developing Security Architectures and Solutions.
• 2+ years experience reviewing and identifying security risks/gaps.
• The Security Architect must have at least two years experience with some or all of the following:
  • Experience in using architecture methodologies such as TOGAF, SABSA, Zachman, etc
  • Direct, hands-on experience or a strong working knowledge of vulnerability management tools.
  • Documented experience and a strong working knowledge of the methodologies to conduct threat-modeling exercises on new applications and services.
  • Experience securing CI/CD pipelines.
  • Experience in public cloud security such as AWS, Azure, Alibaba Cloud, Oracle Cloud
  • Full-stack knowledge of IT infrastructure
  • Could infrastructure and technologies
  • Databases
  • Operating systems Windows, Unix and Linux
  • Hypervisors
  • IP networks WAN and LAN
  • Storage networks and technologies
  • Backup networks and media
  • Containers/Kubernetes

Strong working knowledge of IT service management (e.g., ITIL-related disciplines):

• Change management
• Configuration management
• Asset management
• Incident management
• Problem management

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.