Description

Design and implement proactive application security frameworks, threat models, and secure design patterns. You will integrate security controls into modern SDLCs, automate processes within CI/CD pipelines, and conduct architecture reviews for in-house, COTS, and SaaS solutions.

Responsibilities

• Conduct application security assessments, threat modeling, and cloud architecture reviews.
• Integrate security controls into SDLC workflows, including CI/CD automation.
• Influence stakeholders to correct security deficiencies in solution design and code.
• Translate technical security concepts into business risk language for non-technical audiences.
• Mentor project teams and collaborate with developers and architects to secure designs.

Required Skills

• 5+ years of experience in application security, software development, or architecture.
• In-depth knowledge of OWASP Top 10 and ability to communicate with developers.
• Experience with application security frameworks such as BSIMM and SAMM.
• Expertise in performing cloud architecture reviews and application risk assessments.
• Proven track record of integrating security controls into CI/CD pipelines.
• Experience working in highly regulated environments (HIPAA, HITRUST, PCI).
• Bachelor's degree in an IT-related field.

Preferred Skills

• CISSP, CISM, GIAC, or Offensive Security certifications.
• Experience configuring security controls and secure migration to Azure, AWS, or GCP.
• Cloud Security Alliance certifications (CCSP, CCSK) or (ISC)2 credentials.

Key Skills

Education

Bachelor's degree