Senior IT Architect, Application Security

Our Client, a leading Higher Learning industry player, is seeking an experienced cyber security professional to join their team to protect digital assets against unauthorized access/loss.  

Responsibilities

• Provide subject matter expertise and work collaboratively with application teams to advise, design, build and implement pragmatic cyber security solutions, to ensure that IT applications are sufficiently secured and attained maturity level to achieve cyber security accreditation.
• Perform security design and architecture review of existing and new applications (COTS, bespoke, in-house) on a variety of systems (web, cloud, mobile) across various platforms (.NET, Java), and propose solutions to improve cyber security defense.
• Perform technical security assessment on applications.
• Identify risks in application code, processes and architecture and communicate these risks effectively to business stakeholders and application teams, and propose solutions to mitigate cyber risks.
• Recommend, implement and manage state-of-the-art security tools and processes for application security (SAST/DAST/IAST/RASP).
• Develop and implement new application security policies and guidelines, while improving on existing ones.
• Educate and provide training where necessary to application teams in aspects of secure application design and coding practices.

Requirements

• Degree in Computer Engineering, Computer Science, Information Systems or equivalent qualification.
• At least 7 years of hands-on relevant experience.
• Experience with software development in at least two of the following languages: .NET, Java, Perl, PHP.
• Experience with application security tools such as Micro Focus Fortify, IBM AppScan, etc.
• Experience with application security standards such as OWASP Top 10 and secure coding practices.
• Experience with CI/CD pipelines and the security aspects of it.
• Familiar with common web and mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.
• Good understanding of SDLC models such as Agile, Waterfall, DevOps, DevSecOps , secure SDLC principles/frameworks.
• Certifications such as CSSLP or equivalent is preferred but not mandatory.
• Experience in secure scrum, agile testing environment will be an added advantage.