Senior Application Security Architect

Fairygodboss; Nanterre; Sur place; EUR 80 000 - 120 000; Plein temps

Avantages offerts par ce poste

Inclusive team environment

Continuous learning opportunities

Philanthropic support initiatives

Résumé du poste

Fairygodboss is looking for a Senior Application Security Architect in France. You will work to enhance application security and collaborate closely with development teams. Responsibilities include consulting on security needs and conducting architectural security reviews.

The ideal candidate will have 8+ years of experience and strong expertise in cloud security and risk assessment methodologies.

Qualifications

• 8+ years of experience in application security architecture.
• Experience in application development across multiple languages.
• Ability to perform risk assessments and threat modeling.

Responsabilités

• Provide consulting services to software development teams on application architectures.
• Conduct security reviews using the Threat Modeling methodology.
• Prioritize technical controls based on criticality of risks.

Connaissances

Application Security

Risk Assessment

Threat Modeling

Cloud Security

Cross-Functional Communication

Formation

Bachelor's or Master's degree in a relevant field

Outils

AWS

Azure

GCP

NIST Cybersecurity Framework

OWASP TOP 10

Description du poste

Senior Application Security Architect - EMEA (UK, SP, other)

ADP is hiring a Senior Application Security Architect.

Are you empathetic to client needs and inspired by transformation and impacting the lives of millions of people every day? Are you looking to join a dynamic, inclusive team environment with a culture of collaboration and belonging?

In this role, you will work alongside passionate IT security partitioners and product development teams to enforce and deploy best product security architecture practices. You will join the Product Security team within ADP's Global Security Organization (GSO) that delivers consulting service and is responsible for influencing developers and architects in securing ADP's applications and products globally. The application security architects within the team have strong application security skills to design in proper security, risk, and privacy controls to ADP applications.

The candidate will intervene as a security referent with R&D teams (architects, product managers, development engineers) to address security issues related to architecture design (cloud and on-prem), development practices, application vulnerabilities, with a focus on Threat Modeling. The application security architect will participate in cyber security projects or initiatives aimed at improving the security culture among development teams, for example, or to deliver new security standards according to the evolution of technologies and risks.

The applicant would be able to conduct technical analysis of application security and business security problems, as well as threats and incidents. You have experience explaining the prioritization of the security controls to be integrated as part of our Secure by Design model that internal teams will understand. As the architect partnered with all R&D teams at ADP, he/she must also have the ability to communicate well, motivate and influence cross-functional teams.

What you'll do

• Consult: Provide consulting services to software development teams on existing or new application architectures to help identify security needs, ensure compliance with security standards, and apply secure design patterns and best practices in software development.
• Application Security Architecture Reviews: Conduct security reviews of ADP solution designs and architectures to identify potential threats and the security controls to implement. This includes using the Threat Modeling methodology, which you will explain to R&D teams. You will make decisions and take initiatives regarding security risks and influence the technical architecture. The solutions to review are ADP developed products which may embed Generative AI features, and also third party products integrated in ADP’s landscape.
• Influence on Developers and Architects: Communicate, gather, and collaborate with developers and architects from ADP development teams to adopt security principles in their practices throughout the software lifecycle.
• Prioritization Skills: Prioritize technical controls based on the criticality of risks. Ensure that solution architects focus on the most critical standards and controls. Work with global R&D to implement controls and help quickly remediate the most critical vulnerabilities.
• Security Technology: Participate in strategic projects aimed at providing comprehensive security solutions to enhance the security posture of web applications and APIs, and to apply secure development lifecycle principles (Shift-Left, Security by Design).
• Continuous Learning: Thirst for learning will help you keep up with the constantly evolving technologies and threat landscape, maintaining your ability to assess new technologies and newly developed products. You are comfortable and thrive in an autonomous role, as this will be essential to your success.
• Policies and Standards: Collaborate in maintaining and improving policies, standards, and best practices for application security.

To succeed in this role

• 8+ years of experience in relevant skills gained and developed in the same or similar role.
• Experience in application security architecture in enterprise-class organizations.
• Expertise in application development across multiple languages and platforms.
• Experience securing cloud environments (AWS, Azure, GCP) and containers.
• Significant knowledge of Application Security, Web Application Design, Information Security, Databases, Common Coding practices.
• Experience creating technical security policies and standards.
• Expertise in building application-level security, risk, and privacy controls into cloud applications.
• Knowledge of data encryption and key management.
• Knowledge of Identity and Access Management systems.
• Ability to perform risk assessments and threat modeling (like STRIDE model).
• Must be able to function in a dynamic environment subject to impromptu changes in schedules and priorities.
• Demonstrate well-developed organizational, written communication, and analytical skills.
• Knowledge of NIST Cybersecurity Framework, OWASP SAMM, OWASP Top10, and others.
• Programming experience preferred.
• CISSP and other security certifications preferred.

You'll love working here because you can

• Deliver at epic scale – we deliver real user outcomes using strong judgment and good instincts. We’re obsessed with the art of achieving simplicity with a focus on client happiness and productivity.
• Be surrounded by curious learners – we align ourselves with other smart people in an environment where we grow and elevate one another to the next level. We encourage our associates to listen, stay agile, and learn from mistakes.
• Act like an owner and doer – mission-driven and committed to leading change, you will be encouraged to take on any challenge and solve complex problems. No tasks are beneath or too great for us. We are hands-on and willing to master our craft.
• Give back to others – always do the right thing for our clients and our community and humbly give back to the community where we live and work. Support our associates in times of need through ADP’s Philanthropic Foundation.
• Join a company committed to equality and equity – our goal is to impact lasting change through our actions.

Find out why people come to ADP and why they stay: https://youtu.be/ODb8lxBrxrY

ADA version: https://youtu.be/IQjUCA8SOoA

Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP

ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic including: race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, protected veteran status or disability. Hiring decisions are based upon ADP's operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance.

Ethics at ADP

ADP has a long, proud history of conducting business with the highest ethical standards and full compliance with all applicable laws. We also expect our people to uphold our values with the highest level of integrity and behave in a manner that fosters an honest and respectful workplace.

Click https://jobs.adp.com/life-at-adp/ to learn more about ADP's culture and our full set of values.