Security Architect

Socket.dev; Arlington (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Navy Mutual Aid Association in Arlington, VA is seeking a senior security architect to lead enterprise security strategy and architecture. You will develop and maintain security artifacts, drive IAM, OS hardening, and incident response programs while aligning with business goals.

The role requires collaboration across IT and operations, performing audits, defining baseline configurations, and guiding build automation and disaster recovery planning to strengthen protections across the

Responsibilities

• Develops and maintains a security architecture process aligned with business, technology and threat drivers.
• Manages security audits to ensure compliance with standards and currency with industry norms.
• Plans and implements security administration for IT projects; recommends changes to strengthen security.
• Develops security strategy plans and roadmaps based on enterprise architecture practices.
• Maintains security architecture artifacts to leverage security capabilities in projects.

Job description

The Navy Mutual Aid Association is committed to helping military members grow and protect their wealth through providing life, annuity products, and services. Also, assisting Sea Service members and their families in securing federal benefits to which they may be legally entitled.

Formed in 1879, we are a non-profit, member-owned association that provides high-quality life insurance, financial education and other benefits to military families nationwide. Financially strong, Navy Mutual is proud to be a first-choice provider of life insurance to service members and their loved ones. Our team’s efforts to serve and protect our members and their loved ones is the reason that Navy Mutual enjoys outstanding customer satisfaction member retention ratings. Please find below a short video that reflects Navy Mutual Aid Association’s Mission and Values.

https://www.youtube.com/embed/60nERBKxwUo

Duties & Responsibilities:

• Develops and maintains a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology and threat drivers
• Works cooperatively with all staff to meet the business and customer needs of Navy Mutual, while managing processes and methods for auditing and addressing information security standards; and facilitates migration of non-compliant environments to compliant environments
• Informs and conducts security audits within and outside the organization, to ensure compliance with standards and currency with industry security norms
• Manages and participates in the planning and implementation of security administration for all IT projects; and makes recommendations and assists in the implementation of changes to work methods and procedures to make them more effective or to strengthen security measures
• Develops security strategy plans and roadmaps based on sound enterprise architecture practices
• Develops and maintains security architecture artifacts (e.g., models, templates, standards and procedures) that can be used to leverage security capabilities in projects and operations
• Determines baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation and identity and access management (IAM)
• Participate in the design and execution of the back-up disaster recovery systems, and contingency operations; and participates in systems back-up regimen as needed
• Create and maintain a security training program, and perform regular security awareness training for all employees, to educate and ensure compliance with the organization’s security policies, standards, and procedures
• Responsible for maintaining project software and documentation inventory and configuration baselines
• Establishes and maintains all CM processes and procedures; including library and software development information, impact assessments, incident reports, and software change notices, etc.; on a continuous basis
• Identifies and implements processes to strengthen, streamline and automate build processes; and serve as an advocate for best practices to drive the development and maintenance of build automation tools
• Maintain operational configurations of all in-place solutions as per the established baseline control efforts, using automated CM tools
• Responsible for change management controls and reporting/documentation
• Manage relationships with contractors and vendors as needed
• Establishes a taxonomy of indicators of compromise (IOCs) and share this detail with other security colleagues, including the security operations center (SOC), information security managers and analysts, as well as counterparts within the network operations center (NOC)
• Other duties as assigned

Navy Mutual Aid Association is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetics, disability, age, veteran status, or any other characteristic protected by law.