Security Architect

Security Architect

Providing input and recommendations to the development teams related to architecture, design, coding practices and SDLC elements that could potentially impact the application or solution from a security perspective.

· Validating controls for Encryption, Access Control, Web Application Vulnerability Detection, OWASP top 10 and other common web application security parameters.

· Reviewing application architecture and design from an application security and information security perspective ensuring alignment with organization security standards and industry best practices.

· Serving as a subject matter expert (SME) for performing vendor risk assessments (including Cloud Services) to improve overall vendor risk program.

· Providing technical expertise on secure software development and support of all associated activities, processes, and tools for protecting technology-based information

· Ensuring that development is done in accordance with industry standards for secure development

· Facilitating Periodic static code analysis utilizing existing standard service offering.

· Facilitating dynamic and/or manual security testing utilizing existing standard service offering

· Reviewing, developing, testing, and implementing security plans, products, and control techniques

· Reviewing circumstances surrounding security gaps in and designs corrective actions

· Maintaining awareness of security and technology trends and shares that knowledge with others

· Evangelizing security policies, standards, and nonfunctional requirements where/when needed

· Daily and Weekly Status Reporting - for Work in Process and Planned and issues

· Documenting processes, procedures, assessment outputs, working papers documentation to support existing SDLC and governance requirements

· Representing security and IT risks among other company risk departments and committees.

· Evaluating the effectiveness of awareness and training programs and makes recommendations for improvement.