Security Architect Analyst

krg technology inc; Washington (District of Columbia); On-site; USD 100,000 - 130,000; Part time

Job summary

A technology and security solutions firm is seeking a Security Architect Analyst in Washington, DC. The role requires demonstrated experience in enterprise security architecture tailored for the financial services sector and extensive knowledge of AWS security implementations. Candidates should be well-versed in OWASP Top 10 and SANS 25 vulnerabilities, with the ability to guide teams in remediation efforts. This position engages with senior management to ensure compliance with security standards and demands excellent interpersonal abilities. Contract duration expected.

Qualifications

• Demonstrated experience in enterprise security architecture design for financial services or similar.
• Extensive knowledge of IT and enterprise architecture.
• Ability to work well under pressure and meet deadlines.
• Knowledge of best practices for enterprise security architecture.
• Practical knowledge of common web vulnerabilities.
• Guidance for data protection based on sensitivity and risk.

Responsibilities

• Design and implement enterprise security architecture.
• Collaborate with senior management to identify requirements.
• Guide project teams in mitigating web vulnerabilities.

Skills

Enterprise security architecture design

AWS security

OWASP Top 10 knowledge

SANS 25 knowledge

Code review

Cloud security

Mobile security architecture

Interpersonal skills

Education

Industry certifications (CISSP, CISM, GIAC, ISSMP)

Job description

Direct : 661-367-8000 Ext : 310

Job Description

Job Title: Security Architect Analyst

Location: Washington, DC

Duration: Contract

Job Description

Skills to Focus: OWASP Top 10, SANS 25, SQL Injection, Code review, Cloud Security - AWS

Required Skills/Abilities:

• Demonstrated experience enterprise security architecture design and implementation for a financial services organization or other organizations with similar information security needs and requirements.
• Extensive knowledge of IT, enterprise architecture, software development life cycle, and information security platforms and applications;
• Ability to work well under pressure and to meet tight deadlines. Demonstrates a high level of motivation, confidence, integrity and responsibility.
• Knowledge of best practices and standards for enterprise security architecture specifically in the field of Identity & Access Management, Enterprise Content Management, Collaboration Tools, Service-Oriented Architecture, Cloud, Mobility, Data Analytics, and Web 2.0 related services.
• Experience providing guidance for data protection based on data sensitivity and associated business risk.
• Practical knowledge of common Web vulnerabilities as per SANS 25 or OWASP Top 10 specifications, and experience guiding project team remediating such vulnerabilities.
• Industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), and Information Systems Security Management Professional (ISSMP).
• Demonstrate excellent interpersonal skills; including the ability to work independently, effectively in a team/task force as a team member or leader, and with senior staff and managers in the unit and elsewhere in the WBG.
• Ability to collaborate with senior management stakeholders to identify requirements and drive compliance with approved standards.

Required Skills

• Candidate must have demonstrated architecture and control experience working with Amazon Web Services (AWS), to secure workloads.
• Candidate must have an understanding of OWASP Top 10 and SANS 25 vulnerabilities and how to mitigate these vulnerabilities and an architecture/coding standpoint.
• Mobile security architecture experience a plus
• Candidate must have an understanding of the Cloud Security Alliance (CSA), Cloud Controls Matrix and how it can be leveraged for reviews of cloud solutions

Additional Information

All your information will be kept confidential according to EEO guidelines.