Description

You will design and implement proactive application security frameworks to ensure secure architecture and development across business solutions.

Responsibilities

• Design secure design patterns, development standards, and threat modeling frameworks.
• Conduct application security assessments, threat modeling, and architecture reviews.
• Integrate security controls into a modern SDLC, including automation within CI/CD pipelines.
• Influence stakeholders to correct security deficiencies in solution designs and code.
• Provide technical solutions to security gaps while maintaining business and technical functionality.
• Analyze business impact of emerging threats and recommend mitigation technologies.

Required Skills

• 5+ years of experience in application security or software architecture.
• In-depth knowledge of OWASP Top 10.
• Expertise in cloud architecture reviews, application risk assessments, and threat modeling.
• Experience with application security frameworks such as BSIMM and SAMM.
• Proven ability to integrate security controls into CI/CD pipelines.
• Experience implementing security for in-house, COTS, and SaaS solutions.
• Experience working in highly regulated environments (HIPAA, HITrust, PCI).
• Ability to translate technical concepts into plain language for business risk communication.
• Bachelor's degree in an IT-related field.

Preferred Skills

• Knowledge of security control configuration and migration to Azure, AWS, or GCP.
• CISSP, CISM, GIAC, or Offensive Security certifications.
• Cloud security certifications (AWS, Azure, GCP, CCSP, or CCSK).

Key Skills

Education

Bachelor's degree in an IT-related field