Please ensure Javascript is enabled for purposes of website accessibility

Application Security Architect

Permanent

Vignetic

Application Security Architect
Jersey City, New Jersey
Apply Now

Application Security Architect Jersey City, New Jersey

Title:  Application Security Architect

Job Type:  Permanent

Primary Location:  Jersey City, New Jersey (Hybrid)

The Challenge:

Vignetic is looking for an Application Security Architect who will be responsible for reviewing applications to secure the organization’s critical IT assets according to appropriate security practices and in compliance with company standards, policies, procedures, and security architecture.

Role & Responsibilities:

  •  
  • Assist Security Engineering & Architecture function to perform application and data security reviews to confirm that applications are compliant with company policies, standards, and security architecture, and that the right security controls are applied to keep data secure.
  •  
  • Assist the Security Engineering & Architecture function, Enterprise Architecture function, and company agencies to apply security controls such as multi-factor authentication, security information event management, database encryption, database monitoring and web application firewall to applications.
  •  
  • Assist Security Engineering & Architecture function, and company agencies to research new security technologies and their application to the corporate environment.
  •  
  • Collaborate with project teams, Security Engineering and Architecture functions, and agencies in research and design phases of solutions to ensure that information security is a fundamental quality.
  •  
  • Design, implement, and support application security solutions in compliance with company security-related standards, policies and procedures, and security architecture, as well as with industry standards, reference architectures and implementation patterns. Follow best practices on Secure SDLC (e.g., threat modeling, integrating security considerations into the testing cycle).
  •  
  • Provide application security technical expertise to the Security Engineering & Architecture function, IT, and company agencies during the full lifecycle of security assessment, recommendation, testing, installation, rollout, and operations.
  •  
  • Ensure that application security technologies are properly implemented and meet all applicable requirements. Proactively work with IT and agencies to ensure all security components are appropriately integrated into the overall enterprise technology.
  •  

Essential Skills & Qualifications:

  •  
  • Strong experience of reviewing the security of applications for alignment with security architecture, security policy, security standards and best practices.
  •  
  • Experience of reviewing and contributing to corporate security architecture frameworks, security standards and security policies.
  •  
  • Experience of web server, web application and API security and remediation. In-depth knowledge of OWASP Top-10 security risks and how to address them.
  •  
  • Experience of application risk assessment via threat modelling using STRIDE, OCTAVE, PASTA, or similar framework, and of providing recommendations to mitigate threats and reduce risk.
  •  
  • Experience of using web dynamic application security testing (DAST) tools such as Burp Suite, OWASP ZAP and Checkmarx, and of providing recommendations to mitigate vulnerabilities.
  •  
  • Experience of using network security assessment tools such as NMAP and Nessus and of providing recommendations to address security weaknesses identified.
  •  
  • Experience or working knowledge of penetration testing methods, of interpretation of penetration test reports, and of recommendations to address findings.
  •  
  • Experience of data security solutions such as encryption, hashing, digital signatures, data tokenization and masking.
  •  
  • Working knowledge of multi-factor authentication and single sign-on mechanisms for applications.
  •  
  • Working knowledge of Amazon Web Services and Microsoft Azure cloud computing platforms.
  •  
  • Good general knowledge of core security networking concepts like TLS, SSH, DNS, firewalls.
  •  
  • Good general knowledge of enterprise software, containers, operating systems, and server virtualization.
  •  
  • Experience of conducting product evaluations, proofs of concept, pilots, and rollouts.
  •  
  • A proven ability to interface across a global organization with other teams, such as EIS Engineering and Security, Corporate Applications, Enterprise Applications, Internal Audit, agency CIOs, and agency security teams and compliance coordinators, etc.
  •  
  • An analytical demeanor and the ability to effectively communicate with individuals across all levels the organization.
  •  
  • Excellent written and verbal communications skills.
  •  
  • Ability to adjust to changing priorities while multitasking effectively.
  •  
  • Working knowledge of compliance frameworks and security management standards (e.g., ISO 27001, COBIT, NIST CSF, PCI-DSS).
  •  
  • Working knowledge of best practices/standards (e.g., PCI DSS, HIPAA, State data breach laws) for implementing application-level data encryption.
  •  
  • Bachelor’s degree in Computer Science, Information Security and Risk Management, Information Systems, Engineering, or related major.
  •  
  • CISSP, CASE, CASS, CLSSP, GIAC GWEB similar certification required.
  •  
  • Solid progressive experience working in Information Technology with at least some of that directly in Information Security.
  •  
  • Some experience in a security architect role with experience in reviewing and approving the security of applications.
  •  
  • Advertising and marketing communications industry experience preferred.
  •  

#IND123

 

Apply Now

Apply for job