Y
Senior Application Security Architect
В офисеПолная занятостьSecurity Solutions EngineeringIT Services
Lead application security architecture and secure development practices across a complex enterprise environment. Guide security throughout the project lifecycle and advance Security by Design across development and production.
Обязанности
- Define application security architecture for new and existing systems.
- Provide security guidance from project initiation and design through implementation and production.
- Lead and continuously improve the Secure Software Development Lifecycle.
- Define security requirements for applications, information systems, and development projects.
- Establish secure coding guidelines and support adoption across development teams.
- Conduct security architecture reviews and recommend secure design solutions.
- Manage remediation of findings from code reviews, vulnerability assessments, and application security tools.
- Automate security controls and processes through integration with internal and external platforms.
- Develop and implement application security policies, standards, procedures, and methodologies.
- Collaborate with Development, Architecture, Infrastructure, Cloud, DevOps, and Information Security teams.
Требования
- Bachelor’s degree from a recognized academic institution; a degree in Computer Science, Software Engineering, Information Systems, Computer Engineering, or a related field is preferred.
- At least 5 years of experience in information security or cybersecurity.
- At least 3 years of experience as an Application Security Architect or in a similar role.
- Experience leading Secure SDLC processes in an enterprise environment.
- Experience defining application and information-system security requirements, providing secure development guidance, and conducting security architecture reviews.
- Hands-on experience with SAST and DAST tools and secure code reviews.
- Strong knowledge of OWASP Top 10, CWE, and secure development principles.
- Experience creating application security policies, standards, procedures, and methodologies.
- Strong understanding of web, API, microservices, and cloud architectures.
- Ability to lead initiatives independently and manage multiple stakeholders.
- Excellent communication skills in Hebrew and English.
Будет плюсом
- Experience in an enterprise organization with more than 2,000 employees.
- Experience in an organization responsible for national critical infrastructure.