|
Position ID: AS-PD
Job Category: IT/Software Development
Type: Full Time, Employee
Minimum Education: Bachelor's Degree
Please forward a Word version of your resume to paul.doray@princetonone.com for review and interview. Application/IT Security Architect POSITION SUMMARY: - Develops application development security standards and best practices to meet corporate, government and international compliance and privacy rules to which the organization is bound
- Researches, recommends and manages tools and services to aid in web application security reviews and remediation.
- Documents security standards and ensures processes and training are delivered to the appropriate audience
- Establishes security standards and minimum requirements for the outsourcing of application development
- Is the designated leader of the AppSec Steering team charged with governing the AppSec Program
- Participates on application project teams as the IT Security representative ensuring the implementation of security best practices through the SDLC
- Provides recommendations for process improvements of the AppSec Program
- Assists InfoSec Operations with Incident Response and Auditing tasks as needed
- Researches and understands new application and related technology threats, recommends and implements risk mitigation solutions as needed
- Provides professional consultation to others in the organization regarding application security
- Provides services and ongoing support consistent with defined Service Level Agreements, including occasional off-hours support
REQUIRED QUALIFICATIONS: - BS in Computer Science or related degree or experience
- Strong experience (at least 3 years) with application security frameworks, standards and secure programming methodology. Additional experience with development protocols (HTML/XHTML, XML, XSL, CSS, JavaScript/DOM scripting, SOAP, SSL)
- Proficient in project management with a proven track record in the development and implementation of application security programs
- Ability to work independently and take responsibility for a project in its entirety
- Ability to lead and communicate effectively with customers across the enterprise
- Excellent written, verbal and presentation communication skills
- Strong organizational skills with the ability to work in a matrix environment
- Ability to work independently, be self motivated and focused on completing objectives
- Respectful of co-workers and peers and willing to listen to others to meet business needs
- Articulate and able to discuss technical matters to non-technical individuals
- PMP certification a plus
- CISSP, CSSLP, ASIS, or CPP certification a plus
Please forward a Word version of your resume to paul.doray@princetonone.com for review and interview
|