Airlines Careers Remote @ Get Dream Job

United Airlines; Dover (DE); Remote; USD 42,000 - 62,000; Full time

Job summary

United Airlines is seeking a Principal Architect to oversee application security across the product lifecycle. You will lead security integration with development teams, perform both automated and manual testing, and guide engineers on secure coding practices to meet regulatory and industry standards.

The role demands experience in risk assessment, threat modeling, and cloud/on-prem security architectures, driving security excellence in a global aviation environment.

Qualifications

• Four year college degree in STEM/Software engineering.
• Strong understanding of OWASP Top 10 and remediation strategies.
• Ability to work with development teams to build secure solutions.
• Knowledge of common vulnerabilities and attack vectors, encryption, and authentication standards.
• Proficiency in application risk assessment, risk ordering and security testing tools.
• Familiarity with industry standards and reference architectures.
• Experience in secure network architecture in cloud and on-prem environments.

Responsibilities

• Lead security integration across the product lifecycle from design to deployment.
• Perform code analysis using SAST/DAST/SCA and manual vulnerability testing.
• Guide remediation and provide direction to engineers on secure coding practices.
• Evaluate new frameworks or changes for security impact and compliance.
• Develop threat models and risk prioritization aligned with best practices.
• Collaborate with multiple teams to embed security in product development.

Skills

Secure coding

OWASP Top 10

Security risk assessment

Cloud & on-prem security

Application security testing

CI/CD security

Team collaboration

Education

Bachelor's degree in STEM/Software engineering

Job description

Job Responsibilities

Principal Architect Salary: $20-30/Hour Company: United Airlines Location: Dover, USA Educational Requirements: Graduate

Full Job Description: We accept that incorporation moves development and is the underpinning of all that we do. Joined's Advanced Innovation group traverses the globe and is comprised of assorted people generally cooperating with state of the art innovation to assemble the best carrier throughout the entire existence of avionics. Our group plans, creates and keeps up with enormously scaling innovation arrangements rejuvenated with imaginative structures, information examination, and computerized arrangements.

Key Liabilities

The Chief Engineer - Application Online protection approves that our administrations, applications and sites are planned and executed as per Joined's solid improvement guidelines.

The Foremost Planner is a senior level place that works intimately with improvement groups, item groups and different groups across the association to coordinate security into the item lifecycle from plan through organization.

The Foremost Designer is a perceived expert in characterizing security necessities, performing application security evaluations and giving engineers remediation direction and guidance.

On some random day, the Essential Application Security Designer can be pulled in to assess another framework, survey a proposed application change, or give direction on application security/coding best practices.

Searched out as a confided in counsel/specialist and aids the production of safety plans, prerequisites, risk checking and moderation direction in arrangement with industry best practices and administrative necessities

Leads engineering plan assessments and danger demonstrating of our items (cloud and on-prem)

Suggests and carries out items/benefits that help functional necessities and security prerequisites

Help with driving the plan, definition and execution of safety best practices and principles and guarantee item improvement groups grasp them

Elevates and adds to the ceaseless improvement of our security system and supports risk prioritization

Assists train and backing with joining individuals

Drives the improvement of the availability of safety through computerization, constant mix pipelines and different means

Perform code investigation of utilizations, physically and utilizing SAST, DAST, and SCA checking arrangements as well as leading manual weakness examination

Specialized resource for item groups as it connects with robotization, CI/Compact disc, and remediation direction

Capabilities

What's expected to succeed (Least Capabilities):

• Four year college education in STEM, Software engineering
• Profound comprehension of OWASP Top 10 and CWE 25; capacity to execute and coordinate remediation methodologies
• Capacity to team up with advancement groups to fabricate secure arrangements, conveying dangers and carrying agreement to different needs
• Information on normal weaknesses and assault vectors, pervasive encryption innovations and normal verification conventions
• Gifted in application risk appraisal, risk order, and application security testing apparatuses
• Information on current industry principles, best practices and reference structures
• Strong handle of secure organization and framework plan in both cloud and regular conditions, as well as of organization and web related conventions
• Strong comprehension of web applications, web servers, layer 7 application advancements, systems and conventions regarding application improvement and arrangement
• Capacity to work freely and self-persuade
• Great critical thinking, decisive reasoning, relational, joint effort, composed and verbal relational abilities
• Should be lawfully approved to work in the US for any business without sponsorship
• Effective culmination of interview expected to meet work capability
• Solid, reliable participation is a fundamental capability of the position

What will assist you with pushing from the pack (Favored Capabilities):

• Affirmed Moral Programmer (CEH)
• GIAC Security Basics (GSEC)
• Affirmed Data Security Director (CISM)
• Comp TIA Security +
• Affirmed Data Frameworks Security Proficient (CISSP)
• Confirmed Data Frameworks Inspector (CISA)
• Frameworks Security Confirmed Professional (SSCP)
• CompTIA Progressed Security Expert (CASP+)
• Hostile Security Confirmed Proficient (OSCP)
• Application entrance testing to show and test exploitability of weaknesses
• Acquainted with cascade and deft advancement cycles and capacity to coordinate secure improvement rehearses into the two models
• Experience with various programming
• Progress in executing viable Secure SDLC systems across an enormous organization

Joined values different encounters, points of view, and we energize every individual who meets the base capabilities to apply. While having the "ideal" capabilities make for a more grounded competitor, we support candidates who may not feel they really take a look at Those crates! We are continuously searching for people who will bring a genuinely new thing to the table!