Sr Application Security Architect

📋 Description

• Partner with engineering, architecture, and cloud teams to improve security across on-prem, hybrid, and cloud.
• Design and promote secure architectures with Secure by Design, Secure by Default, defense-in-depth, and Zero Trust.
• Conduct secure design reviews, threat modeling, code reviews, and security assessments across the SDLC.
• Collaborate with product management and stakeholders to ensure security aligns with objectives and regulatory expectations.
• Support development teams with guidance on secure coding, hardening, and software security best practices.
• Develop and maintain security standards, guidance, and educational materials to strengthen organizational security.

🎯 Requirements

• Bachelor's degree in CS, EE, or related field, or equivalent experience.
• 8+ years in secure software development, security architecture, or related cybersecurity.
• 4+ years implementing or promoting secure SDLC and app security practices.
• Security certifications such as CISSP, CSSLP, CCSP, CISM, CEH, GIAC, SANS preferred.
• Strong knowledge of OWASP Top 10, CWE, CVSS, SANS Top 25, and MITRE ATT&CK.
• Experience securing apps built with Java, Python, C/C++, JavaScript, PHP, or Go.

🎁 Benefits

• Remote work within the Eastern Time Zone (US).
• Comprehensive medical, dental, vision, and prescription drug coverage.
• Industry-leading 401(k) retirement plan.
• Tuition assistance and ongoing professional development.
• Generous PTO, holidays, and an annual Winter Wellness Break.
• Paid parental leave, unlimited sick leave, and volunteer time off.