Application Security Architect – Investment Firm– New York, NY 10104
We are currently seeking candidates for an experienced Application Security Architect position located in New York, NY 10104. The role is with an industry leading Investment Management firm. The Application Security Architect will play a critical role in identifying and mitigating security risks within the firm’s applications. All candidates must have 5+ years of relevant application security experience. Qualified candidates that want to work 100% REMOTE will be considered for the role.
This is a 6+ month contract position that will pay $75-$80/hr within a 40 hour work week.
Responsibilities:
- Conduct comprehensive security reviews of new applications, identify risks, propose mitigation strategies, and ensure alignment with security best practices.
- Perform security risk assessments (SRA) for critical applications, identify vulnerabilities, and recommend enhancements.
- Develop and maintain security policies and procedures related to application development and distribution.
- Secure container orchestration platforms (OpenShift) and manage container runtime environments (Podman, Docker).
- Implement and manage API security solutions (MuleSoft, Traceable preferred).
- Oversee open source security using NexusIQ or similar tools.
- Install, configure, and maintain RASP solutions (Contrast Protect preferred).
- Collaborate with development teams to integrate security considerations throughout the software development lifecycle (SDLC).
- Provide security guidance and training to development and operations teams.
- Stay current with emerging security threats, technologies, and regulations.
Qualifications:
- BS degree in Computer Science, Cybersecurity, or a related field (preferred).
- Minimum of 5 years of experience in an application security role, with hands-on experience in security architecture and risk assessments.
- Proven expertise in securing container environments and managing container security.
- Experience with API management and security, especially with MuleSoft and Traceable (a plus).
- Proficiency in managing open-source security and utilizing tools like NexusIQ.
- Experience implementing RASP solutions, preferably Contrast Protect.
- Strong understanding of secure coding practices, ethical hacking methodologies, and threat modeling.
- Familiarity with industry standards and frameworks such as OWASP, NIST, and ISO 27001.
- Relevant security certifications (CISSP, CEH, OSCP, etc.) are highly desirable.
If you are interested in learning more about the opportunity, please send your resume to Mark at [email protected].
#LI-MD1
#LI-REMOTE