Remote Security Architect—Threat Modeling & DevSecOps

Ascendion; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Long-term disability insurance

Short-term disability insurance

Personal days off

Paid vacation time

Paid holidays

Job summary

A leading digital engineering solutions company is seeking a Security Architect to oversee security controls and develop risk assessment frameworks. The ideal candidate will have in-depth knowledge of DevSecOps, application security management, and consultative background. Responsibilities include defining security testing frameworks and conducting training sessions. This remote position offers a competitive salary and comprehensive benefits, aiming to elevate engineering standards to ensure client safety and compliance.

Qualifications

• 5+ years of consulting background with relevant security certifications is a plus.
• Strong understanding of DevSecOps and Application Security Management.
• Experience in threat modelling and risk management.

Responsibilities

• Understand client Security, Privacy, and Compliance requirements in context of DevSecOps.
• Develop a catalogue of Security Controls for enterprise solutions.
• Perform end to end BIA, PIA, and Risk/BCV assessments.

Skills

In depth knowledge of DevSecOps/Application Security Management

Experience of 3-5 years in DevSecOps/Application Security Management

Hands on with threat modelling, BIA, PIA and risk management

Excellent knowledge of security control frameworks (ISO 27001, NIST CSF, CIS, ATT&CK)

Excellent knowledge of privacy controls (OECD, ISO 27701)

Consulting background of 5+ years

Certifications such as CISSP, CISM, CRISC, CSSLP, E|CDE, CDP, GCSA (good to have)

Job description

A leading digital engineering solutions company is seeking a Security Architect to oversee security controls and develop risk assessment frameworks. The ideal candidate will have in-depth knowledge of DevSecOps, application security management, and consultative background. Responsibilities include defining security testing frameworks and conducting training sessions. This remote position offers a competitive salary and comprehensive benefits, aiming to elevate engineering standards to ensure client safety and compliance.