Application Security Architect

We have a South Florida (near Fort Lauderdale) client with an immediate full time permanent need for a strong Application Security Architect. This role will be somewhat of a hybrid of development, security and infrastructure involving Working with Risk Management team, application architects and various business units to define, develop, socialize and execute long-term application security roadmap. This will include:Acting as a liaison between Application Architects, various business units and Information Security group Work with Information Security group to understand security requirements for software application Participate in projects with Application Architects and provide security oversight, constructive expertise and guidance to implement appropriate security controls that address business needs Develop various security related utilities for .NET, VB and Java application Scope the marketplace for application security related tools, conduct tool analysis and provide recommendations Consulting with Application Architects and various business units to further their understanding of security principals and tools Develop web single sign-on strategy for software applications Conduct in-house vulnerability assessments and code-reviews on software products Consult with Development, Operations and Risk Management groups on technical security issues. Facilitate trade-offs between security, operability, usability and feature-set; provide risk assessments and recommendations to management Conduct security assessments on third-party applications, and provide purchase recommendations to management

o        Overall responsibility for technical security posture from an architectural and applications perspective

o        Strategically align high level business requirements and security strategies with pros/cons analysis for business to manage risk

o        Program/project management skills, including ability to create and maintain security project plans, schedules, metrics and progress reports/presentations

o        Understand and incorporate financial trade-offs associated with threat analysis versus investment in security countermeasures.Continuously improve IT security processes and review/audit processes to assure compliance with Federal and industry security standards

 

Key tasks and skills will involve working within their Applications team and creating solid, secure “baselines” or “templates” to assist their future development efforts in creating secure applications from ground up.

 

Skills the client feels are important in this role include:

 Software development background and/or understanding in Java/J2EE and/or .Net. Security Program management, 2+ years Good understanding of Web Service Security standards Good understanding of federated identity solutions Good understanding of infrastructure, server and network security Expert knowledge of and experience with security engineering tasks, techniques (e.g., passwords, encryption/decryption, PKI, single sign-on), and tools Have in-depth technical knowledge of multi-level security networks and cross-domain solutions Knowledge and experience with at least one of FIPS, NIST, or ISO security standards and certification and Accreditations procedures Ability to develop systems security, compliance and data privacy designs Architectural strategic planning and design in enterprise security policy and procedures, 3+ years Expert knowledge and experience in secure application design and implementation, especially pertaining to networked and web-based applications Knowledge of software design, software and network architecture, protocols, and standards Experience with software/application security (auditing, authorization, vulnerability checking) Translate enterprise security requirements into a technical systems model describing the architecture and describe the architecture, components and interrelationships Expertise in application-level security auditing Knowledge of computer networks and network security Ability to work effectively with technical and non-technical personnel in a cross-functional setting

 

A solid overall Applications Integration background will be key and an ability and experiences with integrating across multiple platforms including the mainframe is important.

 Grove Technical Resources has been a Netegrity (now CA) SI partner for many years and this is a very good client of ours. As this is a full time, permanent position, no sponsorship nor transfers are available.