Application Security Architect
Daley And Associates is currently seeking a qualified candidate for an Application Security Architect position in a 6+ month consulting engagement. Our client is a prestigious Boston based investment manager. Financial services experience is a plus, but not required.
This is a senior level role that will be focused on application security. The ideal candidate would be local to Boston with a strong background in containers, MuleSoft, Traceable, and other skills listed. This position is a hybrid role in Boston, Massachusetts (3 days a week on-site).
Responsibilities:
- Conduct thorough architecture reviews of newly developed software applications to identify potential security risks, propose effective mitigation strategies, and ensure alignment with industry-leading security best practices.
- Perform comprehensive Security Risk and Assessments (SRA) for critical applications, pinpointing vulnerabilities and recommending robust solutions to fortify security posture.
- Develop and uphold security policies and procedures concerning the development and deployment of applications, ensuring adherence to stringent security standards.
- Secure container orchestration platforms, such as OpenShift, and proficiently manage container runtime environments utilizing Podman and Docker technologies.
- Implement and oversee API security solutions, with a particular emphasis on experience with MuleSoft and Traceable platforms.
- Supervise the integration and administration of open-source security tools, leveraging platforms like NexusIQ to swiftly identify and rectify vulnerabilities.
- Install, configure, and maintain Runtime Application Self-Protection (RASP) solutions, particularly adept with Contrast Protect, to deliver real-time application security.
- Collaborate closely with development teams to embed security considerations seamlessly within the software development lifecycle (SDLC).
- Provide expert security guidance and deliver comprehensive training sessions to development and operations teams, fostering heightened awareness and superior security practices.
- Remain abreast of emerging security threats, cutting-edge technologies, and evolving regulations to ensure the continued security of our applications and infrastructure.
Qualifications:
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field.
- Minimum of 5 years of hands-on experience in an application security role, with a proven track record in security architecture and risk assessments.
- Demonstrated expertise in securing container environments and adept at managing container security.
- Proficiency in API management and security, with a specific focus on MuleSoft and Traceable platforms.
- Experience in managing open-source security and utilizing tools such as NexusIQ.
- Proficient in implementing RASP solutions, with a preference for Contrast Protect.
- Strong grasp of secure coding practices, ethical hacking techniques, and adeptness in threat modeling.
- Familiarity with industry standards and frameworks including OWASP, NIST, and ISO 27001.
- Possession of relevant security certifications (CISSP, CEH, OSCP, etc.) is highly desirable
For immediate consideration please email a resume to Ryan at [email protected]
#LI-RH1
#LI-HYBRID