Job Description :
Job Title: Application Security Architect
Location: Philadelphia, PA
Required Skills Are:
10+ years of experience.
At list 5 years of experience working with security architectures -Architected security for products, enterprise, information and other initiatives.
Strong understanding of PCI concepts.
Cloud security (AWS/ AZURE
Data and database security.
Job Overview:
The ideal candidate will work internally with App/Dev/Platform teams and externally with global security teams to ensure application and system security posture for the Digital First organization is improved to world class security standards.
This includes helping and guiding application development and platform teams to design and architect secure applications ground up, implementing secure coding practices, evaluating cloud environment being established in AWS/Azure to ensure security considerations are implemented and met for best practices.
This is a perfect opportunity for the successful candidate to become a part of an innovative, energetic team that believes; “security must not be an afterthought, nor is an impediment to delivery velocity but can be achieved as a balancing act b/w managing risk and ensuring high quality delivery velocity”.
Qualifications:
Architected security for products, enterprise, information and other initiatives
Proficient at the secure software development lifecycle and DevSecOps
Proficient at identity, authentication and authorization systems
Good understanding of cryptographic trust based systems
Cloud security knowledge preferred
Data and database security
Federation, SSO, IDS, IPS, Host Based Firewall, WAF (Web Application Firewall), DNS, DHCP, HTTPS/TLS, SSH, Key Management, PKI, Tokens, SAML, OAUTH, Fido knowledge preferred
Knowledgeable in compliance standards like: PCI, CPNI, ISO 27001, FCC Regulations, SOX, Subscriber PII
Coding experience preferred but not required
Security expertise in one or more relevant areas
Knowledge of Intrusion Detection & Prevention Systems
Following certifications are a plus-
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified Information Systems Auditor (CISA)
Licensed PEN Tester (LPT)
Certified Ethical Hacker (CEH)
Global Information Assurance Certification (GIAC)
Certified Secure Software Lifecycle Professional (CSSLP)
Education:
Bachelor’s Degree in Information Systems, Computer Science, Management Information System, Cyber Security or Engineering