General Responsibilities: Responsible for the design, implementation, and maintenance of application security systems, this role focuses on ensuring robust data integrity and the safety of employees. The candiddate will develop and enforce policies and procedures that align with industry standards, safeguarding both client and employee data across various application technologies. Key tasks include performing vulnerability assessments, executing penetration tests, and analyzing security reports from external resources.

Essential Roles and Responsibilities:

Architecting and engineering security frameworks for systems in both on-premises and cloud environments, tailored to specific security needs, resilience requirements, and industry best practices.
Constructing security structures that effectively reduce cyber risks affecting the integrity, availability, or confidentiality of company assets.
Undertaking threat modeling, creating detailed security patterns and standards to identify and mitigate risks.
Serving as a cybersecurity expert in the development and execution of the company's overall enterprise architecture, providing senior-level technical guidance.
Influencing enhancements in security across the entire technology spectrum.
Developing and implementing strategic roadmaps for security improvements.
Adopting Secure Software Development Framework (SSDF) and DevSecOps methodologies across application platforms.
Transitioning manual processes to automated systems within cloud-based environments.
Designing, integrating, and testing advanced security and incident prevention solutions.
Developing and testing automated response systems, threat analysis, and intrusion prevention/detection solutions.
Guiding junior staff with industry best practices, technical advice, and professional development.
Formulating security strategy plans and roadmaps based on established enterprise architecture principles.
Creating security architecture documents (models, templates, standards, procedures) for use in projects and operations.
Monitoring trends in digital business and threat landscapes to ensure adequate incorporation in security strategies and architecture documents.
Performing security evaluations of internal systems, applications, and IT infrastructure as part of the organization's risk management.
Prioritizing system remediations based on vulnerability assessments and risk profiles, in consultation with IT management.
Analyzing security and infrastructure logs for unusual activities or indicators of compromise.
Conducting comprehensive inventories of all systems, infrastructure, and applications for security logging purposes.
Collaborating with legal and privacy teams to map sensitive data flows and recommend protective measures (like encryption).
Assessing IT infrastructure for compliance with security best practices and suggesting improvements to mitigate risks.
Assisting in testing and validating internal security controls under the guidance of the Senior Security Architect.
Evaluating security technologies and services, recommending them based on security, financial, and operational metrics.
Participating in incident response drills and integrating learnings into security architectures and practices.
Networking with other security professionals to exchange best practices and insights.
Conducting control and vulnerability assessments to identify weaknesses and evaluate the effectiveness of existing controls, suggesting improvements.
Assisting junior staff with the deployment and operation of vulnerability scanning and penetration testing tools.
Adhering to safety rules and standards, engaging in pre-task planning, and reporting safety concerns to management.
Upholding quality standards in all projects.
This is a remote position

Requirements:

A Bachelor’s degree in Information Technology/Systems, Cybersecurity, Information Security, or a related field with at least 8 years of experience, or 12 years of relevant experience in lieu of a degree.
Ability to translate complex security concepts into understandable business terms, with proficiency in presenting findings both verbally and in writing.
Skill in interpreting business, technology, and threat trends to develop practical security roadmaps.
Project management expertise for security service and technology implementations.
CISSP or equivalent certification within 12 months of hire.
Experience with Zero Trust Architecture deployment is advantageous.
Familiarity with risk management and control frameworks (NIST 800-53, SOC2), and industry best practices.
Proficiency in multiple programming languages (.NET, C#, Java, Python, Ruby, Powershell, etc.) and web application frameworks (ASP.NET, Ruby on Rails, Django, Angular, React, etc.).
Experience with Static Code Analysis tools (Checkmarx, Fortify, SonarQube, Veracode, etc.) and Dynamic Application Scanning tools (Burp Suite, OWASP ZAP, Acunetix, Netsparker).
A valid driver’s license with an acceptable violation history.

Preferred Certification:

GIAC – GISP
GIAC - GSEC
CompTIA CASP
CCNP/CCIE

Airitos, LLC

New Jobs

Cyber Security Architect