Full-Time Security Application Solution Architect

Information Security Application Solution Architect is a member of the Information Security team and works closely with other team members to develop and implement a comprehensive information security program.

Key Responsibilities Include:

• Work with business IT customers (architects and engineers) to evaluate application designs, defining/designing application controls aligned with enterprise standards.
• Develop detailed application security controls design and documentation.
• Develop reusable implementation guidance and design patterns to scale service.
• Work with security leadership to develop strategies for enforcing security requirements and addressing risks in infrastructure and applications.
• Collaborate with business application architecture staff to ensure solutions align with security architecture and business strategy.
• Support business and IT initiatives by assisting in design, implementation, deployment, and operational transition of secure solutions.
• Research, evaluate, design, test, recommend, and plan implementation of new/updated security technologies.
• Collaborate with IT functions to ensure solutions align with security architecture.
• Advise on application development/acquisition projects, ensuring security requirements and controls are implemented.
• Complete remediation activities to address compliance and security gaps.
• Research new threats and recommend remedial actions.
• Foster a security culture through education and implementation of effective security processes.
• Adhere to corporate standards (code of conduct, safety, GxP compliance, data security, SDLC).
• Develop and maintain security architecture plans (strategic, tactical, project).
• Demonstrate SOX and HIPAA experience in IT general controls (ITGC).
• Stay current with Information Security & Architecture trends and their impact on business.
• Excellent communication and influencing skills to balance stakeholder interests.
• Strong people skills; collaborate with IT stakeholders inside and outside the organization.
• Ability to formulate network security architecture vision and translate it to execution.
• Understand security frameworks (e.g., ISO, NIST).
• Design the security architecture for applications to meet best practices and regulatory compliance.
• Integrate security into the software development lifecycle (SDLC).
• Identify potential threats through application threat modeling and propose mitigations.

Preferred Skills & Experience:

• Deep understanding of secure application development practices.
• Experience with application security principles (OWASP Top 10, SANS/CWE Top 25).
• Expertise in secure session management, token handling, and authentication (OAuth, SAML, OpenID Connect).
• Knowledge of cryptographic practices, encryption, and PKI management.
• Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP).
• Familiarity with code analysis tools (SonarQube, Veracode) and vulnerability scanning tools (Burp Suite, Nessus).
• Understanding of DevSecOps practices.
• Self-starter, able to work independently and manage multiple projects.
• Strong problem-solving and analytical skills.
• Collaboration skills for cross-functional team work.

What is the last date for applying to the job?

Which countries are accepted for this remote job?