Security Architect

Ascendion; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Long-term disability insurance

Short-term disability insurance

Personal days off

Paid vacation time

Paid holidays

Job summary

A leading digital engineering solutions company is seeking a Security Architect to oversee security controls and develop risk assessment frameworks. The ideal candidate will have in-depth knowledge of DevSecOps, application security management, and consultative background. Responsibilities include defining security testing frameworks and conducting training sessions. This remote position offers a competitive salary and comprehensive benefits, aiming to elevate engineering standards to ensure client safety and compliance.

Qualifications

• 5+ years of consulting background with relevant security certifications is a plus.
• Strong understanding of DevSecOps and Application Security Management.
• Experience in threat modelling and risk management.

Responsibilities

• Understand client Security, Privacy, and Compliance requirements in context of DevSecOps.
• Develop a catalogue of Security Controls for enterprise solutions.
• Perform end to end BIA, PIA, and Risk/BCV assessments.

Skills

In depth knowledge of DevSecOps/Application Security Management

Experience of 3-5 years in DevSecOps/Application Security Management

Hands on with threat modelling, BIA, PIA and risk management

Excellent knowledge of security control frameworks (ISO 27001, NIST CSF, CIS, ATT&CK)

Excellent knowledge of privacy controls (OECD, ISO 27701)

Consulting background of 5+ years

Certifications such as CISSP, CISM, CRISC, CSSLP, E|CDE, CDP, GCSA (good to have)

Job description

Security Architect

Location: Remote

About Ascendion

Ascendion is a full-service digital engineering solutions company. We make and manage software platforms and products that power growth and deliver captivating experiences to consumers and employees. Our engineering, cloud, data, experience design, and talent solution capabilities accelerate transformation and impact for enterprise clients. Headquartered in New Jersey, our workforce of 6,000+ Ascenders delivers solutions from around the globe. Ascendion is built differently to engineer the next.

Engineering to elevate life

Key Responsibilities

• Interact with client stakeholders to understand Business and Technology constructs. Understand Security, Privacy and Compliance requirements in context of DevSecOps.
• Create a custom Threat Model by curating features from industry leading models such as STRIDE, ATT&CK, PASTA, and LINDDUN.
• Create Threat Modelling methodology consisting of Process, Techniques & Tips.
• Create BIA, PIA, and Risk/BCV assessment frameworks as per the client Business and Technology landscape by leveraging industry leading frameworks.
• Perform end to end BIA, PIA, and Risk/BCV assessments for enterprise solutions.
• Develop a catalogue of Security Controls to be leveraged for designing security of enterprise solutions. Develop controls selection criteria and Design considerations.
• Define security testing frameworks (manual, automated, SAST, DAST) and oversee testing activities.
• Create incident monitoring and response templates and perform monitoring setup, incident handling, and readiness activities.
• Undertake reviews of developed frameworks with client stakeholders and incorporate inputs.
• Undertake trainings for client teams on developed frameworks and materials.

Skills Required

• In depth knowledge of DevSecOps/Application Security Management
• Must have spent 3-5 years in DevSecOps/Application security Management.
• Hands on with threat modelling, BIA, PIA and risk management
• Excellent knowledge of security control frameworks (ISO 27001, NIST CSF, CIS, ATT&CK)
• Excellent knowledge of privacy controls (OECD, ISO 27701)
• Must have consulting background of 5+ years
• Good to have certification such as CISSP, CISM, CRISC, CSSLP, E|CDE, CDP, GCSA

Salary Range

The salary for this position is between $120,000 - $150,000 annually. Factors which may affect pay within this range may include geography/market, skill, education, experience, and other qualifications of the successful candidate.

Benefits

The Company offers the following benefits for this position, subject to applicable eligibility requirements: [medical insurance] [dental insurance] [vision insurance] [401(k) retirement plan] [long-term disability insurance] [short-term disability insurance] [5 personal day accrued each calendar year. The paid time off benefits meet the paid sick and safe time laws that pertains to the City/ State] [10-15 day of paid vacation time] [6 paid holiday and 1 floating holiday per calendar year] [Ascendion Learning Management System]

Seniority Level

Mid-Senior level

Employment Type

Full-time

Industries

Technology, Information and Internet and Retail