Application Architect

Application Security Architect role to lead, design implement secure changes to new and existing applications.

Responsibilities:

• Educates, trains, and supports software development and testing staff in good security practices and procedures.
• Oversees security awareness program. Develops, communicates, and trains on requirements set forth in information security policies, standards, baselines, and other related documents.
• Approves recommended changes to security policies/procedures.
• Monitors industry identified vulnerabilities and security alerts. Raises awareness of vulnerabilities and security alerts that could affect systems and applications, and provides recommendations on mitigating or removing the vulnerabilities. Initiates and monitors projects to ensure application platforms (middleware, integration, and frameworks) and languages are kept up to current versions.
• Reviews the identification of application security issues and coordinates the response in accordance with the Security Incident Management Plan. Conducts forensic analysis and investigations.

Skills

• Experience in .NET and Java
• Proven expertise Microsoft operating systems
• Certified CISSP
• Demonstrated understanding of secure application architectures and design
• principles
• Familiarity with implementing authentication and authorization frameworks within enterprise-class products and solutions
• 5+ years in Information Security; application security, penetration testing for applications, some experience with Java and .Net
• Experience leading development leveraging a Secure Development Lifecycle (SDL) model