Description

Lead security architecture reviews and application security assessments to ensure alignment with enterprise standards and compliance policies.

Responsibilities

• Conduct architecture reviews and consulting by gathering requirements, reviewing application designs, and preparing feedback.
• Perform application security assessments including threat modeling, vulnerability assessments, penetration testing, and API/mobile security reviews.
• Review AppSec reports (SAST, DAST, TM) and provide remediation consulting to ensure security observations are addressed before go-live.
• Collaborate with Domain and Solution Architects to implement remediation through proposed technical solutions.
• Support project teams in scoping, planning, and delivery reviews to align with AppSec and security requirements.

Required Skills

• 13+ years of total work experience, with at least 7 years in Information Security architecture and management.
• 5+ years of experience as an IT security expert.
• Expertise in application security assessments, including SAST, DAST, penetration testing, and server configuration reviews.
• Hands-on experience implementing RBAC in multi-tenant cloud environments.
• Deep knowledge of OWASP, secure SDLC, CI/CD pipelines, encryption, PKI, and identity and access management (MFA, SSO).
• Strong understanding of enterprise IT infrastructure, vulnerability management, and change management processes.
• Working knowledge of security frameworks such as NIST, ISO 2700x, COBIT, ISF, or SOX.
• Experience with threat modeling tools like Threatmodeler or IriusRisk.
• Degree in a business, technical, or scientific area.

Preferred Skills

• Professional certifications such as CISSP, CISM, CISA, CRISC, CEH, or OSCP.
• Experience with DevSecOps practices and IT Project Management methodologies.

Key Skills

Education

Any Graduate