Enterprise Security Architect

excellerent solutions; Pittsburgh (Allegheny County); On-site; USD 120,000 - 150,000; Full time

Job summary

Excellerent Solutions is seeking an Enterprise Security Architect in Pittsburgh, PA. This role involves providing technical security insight to align with business objectives, developing security architecture, and ensuring compliance with standards.

The ideal candidate should have extensive experience in cloud environments and a strong background in security architecture. Responsibilities include working with IT teams to develop security policies, conducting assessments, and monitoring compliance.

A bachelor's degree, security certification, and significant experience in information security are essential.

Qualifications

• 7 to 10 years of experience in cloud environments like Azure or AWS.
• Experience in a dedicated information security role for at least 5 years focusing on security architecture.
• Knowledge of web security controls and application architectures.

Responsibilities

• Develop and update security policies aligned with business strategies.
• Implement and drive security best practices in the development lifecycle.
• Conduct vulnerability assessments and penetration testing.
• Prepare security reports and conduct incident response analyses.

Skills

Security architecture principles

Cloud security practices

Vulnerability assessments

Web application security

Compliance standards (HIPAA, SOX, etc.)

Education

Bachelor degree

Master preferred

Security certification

Tools

Security hacking tools

Application security tools

Job description

Position: Enterprise Security Architect
Duration: Full Time
Location: Pittsburgh PA
Interview mode: Inperson
Brand new role

Overview

Serve as a member of the enterprise architecture team, providing technical security insight that aligns with business objectives and security requirements. Establish and evangelize the security architecture (principles, policies, standards and patterns) to development groups, business groups and other stakeholders; Govern adherence to the architecture golden rules. Analyze gaps between current and target security architecture and develop plans to close the gaps.

Responsibilities

• Works with IT departments, information security architects, technical architects, data custodians, and governance groups to develop and update client security policies, standards, procedures, and solutions for secure application architecture. Ensures that security practices are aligned with client’s overall business strategies.
• Advises and drives the security maturity of the development lifecycle including secure coding and system security for operations. Recommends and implements changes in security procedures and practices using best-in-class information to ensure that client is maintaining best-in-class security practices.
• Maintains security by monitoring and ensuring compliance with standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs. Conducts penetration testing, vulnerability, and risk assessments to improve the security architecture and security product toolset.
• Prepares system security reports by collecting, analyzing, and summarizing data and trends. Executes validation by external vendors.
• Verifies security systems and network configurations by developing and implementing test scripts while monitoring adherence to standards in architecture, application design, development, and testing frameworks.

Qualifications

• Bachelor degree with Master preferred. Security certification required.
• 7 to 10 years of experience operating in a cloud environment (e.g. Azure, AWS, Rackspace) along with at least 5 years working in a dedicated information security role with a focus on security architecture for at least 3 years.
• 7 to 10 years of experience with PaaS, IaaS, SaaS, and/or mobile architecture
• Solid experience with security hacking tools and techniques.
• Solid understanding of application architectures and technology including web applications, mobile technology, identity and access management, security event and incident management as well as web security controls (e.g. Web Application Firewall, Database Activity Monitor, Distributed Denial of Service controls).
• Extensive working knowledge of web application security best practices to include, but not limited to, Cloud Security Alliance controls matrix, OWASP Top 10.
• Experience with compliance standards such as HIPAA, CMS, SOX, GLBA; as well as security frameworks such as SANS 20 CSC, CoBIT, or NIST.
• Previous involvement with developing and/or maintaining an Enterprise Security Architecture. Familiarity with TOGAF is a plus.
• Strong understanding and experience of software development methodologies and life cycles.
• Excellent written and verbal communications skills required, with the ability to explain advanced concepts to audiences of varying levels.
• Can be counted on to exceed goals successfully, very bottom-line orientated while steadfastly pushing self and others for results.
• Has working knowledge of web application security best practices to include, but not limited to, Cloud Security Alliance controls matrix, OWASP Top 10.
• Demonstrated ability to make sound decisions using a mixture of analysis, wisdom, experience, and judgement coupled with a strong ability to learn on the fly (quickly learns new tasks, open to change).
• Certifications, licenses or registrations: Security+, CISSP, CISA, CEH.
• Proven ability to organize/manage multiple priorities coupled with the flexibility to quickly adapt to ever-changing business needs.

Additional Information

All your information will be kept confidential according to EEO guidelines.