Information Security Architect

Rithum; Islas Baleares; Presencial; EUR 60.000 - 100.000; Jornada completa

Descripción de la vacante

An established industry player is seeking a Security Architect to join their Information Security team. In this pivotal role, you will oversee the development and implementation of high-impact security solutions, ensuring that the organization stays ahead of evolving cybersecurity challenges. Your expertise in AWS security architecture and application security tools will be crucial in safeguarding software development practices and application infrastructure. This role offers the opportunity to lead architectural designs, establish KPIs for performance, and provide guidance across various teams while translating complex technical concepts into clear language for all stakeholders. If you are passionate about security and eager to make a significant impact, this role is perfect for you.

Formación

• 5+ years in security architecture with a focus on AWS.
• Familiarity with application security tools and secure coding practices.

Responsabilidades

• Ensure cloud infrastructure is secure and resilient.
• Lead design and implementation of security initiatives.
• Communicate security concepts to non-technical stakeholders.

Conocimientos

AWS Security Architecture

Application Security Tools (SAST, DAST, SCA)

Secure Coding Practices

Threat Modeling

Vulnerability Assessment

Data Structures and Algorithms

Business / Technical English

Educación

Bachelor's Degree in Computer Science

Advanced Degrees or Certifications in Security

Herramientas

SAST

DAST

SCA

Descripción del empleo

Rithum is the world’s most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce experiences. We provide an unmatched platform for brands and retailers, enabling them to accelerate growth, optimise operations across channels, scale product offerings and enhance margins.

Today, more than 40,000 companies trust Rithum to grow their business across hundreds of channels, representing over $50 billion in annual GMV. Using our commerce, marketing, and delivery solutions, our customers create optimised consumer shopping journeys from beginning to end.

Overview

As a Security Architect on our Information Security team, you play a critical role contributing to the team’s success through your technical leadership and expertise. In this critical role, you are responsible for overseeing the development and implementation of high-impact security solutions and strategies, ensuring that our organization stays ahead of the ever-evolving cybersecurity landscape. This role demands a strong foundation in software and cloud security, with a balance of technical expertise and communication skills. You apply your experience and knowledge to ensure that software development practices and application infrastructure are secure, highly available, and resilient to attack. You are relied upon to provide guidance and technical leadership to various teams within the organization. You communicate with stakeholders at all levels of the organization, from technical staff to senior management. This requires the ability to translate technical concepts into clear and concise language that non-technical stakeholders can understand. You are also responsible for leading the architectural design and implementation of new security initiatives and establishing meaningful KPIs for team performance, with a mindset of continuous improvement. As a subject matter expert on security standards, requirements, and reference architectures, you create and update these as necessary to ensure the organization remains secure and compliant.

Responsibilities

• Ensure cloud-based infrastructure is secure, highly available, and resilient to attack.
• Design, implement, document, and promote application security solutions.
• Lead the architectural design review and implementation of new security initiatives.
• Provide support in the areas of secure coding practices, threat modeling, security architecture, and vulnerability assessment.
• Develop and maintain security standards, requirements, and reference architectures to ensure organizational security and compliance.
• Evaluate and promote security solutions and tools.
• Provide security training, documentation, and advice to technology and non-technology staff.
• Establish and track meaningful KPIs and SLAs to drive continuous improvement.
• Operate and evaluate application and environment scanning, testing, and review tools.
• Communicate effectively with stakeholders at all levels, translating technical concepts into clear language for non-technical audiences.
• Work effectively with cross-functional teams to implement technical and administrative controls for secure software development including Security Champions and Incident Responders.

Qualifications

Minimum Qualifications

• 5+ years experience working in a security architecture related role, with an emphasis on AWS security architecture.
• Familiarity with application security tools such as SAST, DAST, SCA and S-SDLC concepts.
• Familiarity with application security and development processes and technologies including authentication, encryption, public key infrastructure, and secure communication protocols.
• Proficiency in data structures, algorithms and object-oriented design.
• Business / technical English proficiency.

Preferred Qualifications

• Bachelor's degree in computer science, Management Information Systems, or a related field. Advanced degrees or certifications in technical security or compliance-related areas such as GIAC, CCSK, CISSP or CSSLP are a strong plus.
• Excellent written and oral communication and presentation skills, effectively communicating complex issues to technical and business audiences.
• Strong analytical and problem-solving skills, with the ability to navigate complex environments.
• Detail-oriented and organized, with the ability to manage multiple tasks simultaneously and work with minimal supervision.

Travel Required : Up to 10%

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.