Appsec Architect

Hiring,
Greetings from Modern Agile Technologies.

Position: Appsec Architect, Handon work on OWASP and Secure SDLC

Location: Remote

Type:       Contract

Duties

·        Technology Risk assessment for technologies around EPR, Custom App, COTS, AI, Full stack, etc.

·        Great knowledge of System and security consideeation

·        Knowledge of information security, compliance, policy, risk management, and remediation

·        Identifying process improvements and developing plans to meet or exceed security best practices

·        Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories.

·        Conduct risk assessments on various applications, systems, infrastructure, cloud-environments, and third-party arrangements.  Document identified risk through a risk report to be effectively communicated shared with business and/or technical leadership

·        Confidently represent the Cyber & Information Security risk assessment services function with reviewing and assessing contracts, application designs, integration plans, etc.

·        Create documentation in support of the risk assessment services team

·        Self-directed; expected to identify and lead efforts to correct security controls and/or process improvements

·        Explain complex technical issues to non-technical colleagues and business executives

·        Troubleshoot and independently solve problems as they arise

·        Hands on Experience on Hands on Security Tools

Basic Qualifications: (what are the skills required to this job with minimum years of experience on each)

•        Min 8+ year of experience in security architecture, application and infra security and gold imaging, data protection; advance threat protection; identity and access management; integrated technologies with cross-functional impact

•        Minimum 8+ year of experience with Technology risk assessment

•        Familiar with frameworks like MITRE and OWASP

•        Broad knowledge of commonly used information security concepts, best practices, and standard

•        Strong collaboration, facilitation, and negotiation skills.

•        Strong communication skills, both written and verbal.

•        Familiarity with HIPAA Security Rule and other regulatory requirements

•        Proven analytical and problem-solving abilities

•        Project and program management planning and organizational skills

•        Customer service focused

•        Time management and prioritization