Application Security Architect

Location:

Tempe, AZ

Employment Status:
Permanent Department: IT and Computer

Summary of This Role: responsibilities range from auditing code, architecture, and databases used in custom-developed web and cloud applications to testing for common application level vulnerabilities, weaknesses, and providing both vulnerability analysis and development advice for application hardening.

• Auditing code, architecture and databases used in custom-developed web and cloud applications.
• Testing for common application level vulnerabilities, weaknesses, and providing vulnerability analysis and development advice for application hardening.
• Working with application development and QA teams across multiple products to review, evaluate and prioritize vulnerability findings.
• Providing SME support on secure code implementation, design and architecture.
• Threat modeling and risk analysis.
• Training and participation in providing annual OWASP & PCI training for developers.
• Maintaining updated Secure Coding Best Practices.
• Managing common application level vulnerabilities, risk management, findings/vulnerability prioritization, mitigation strategy.
• Controls evaluation – review, validate, recommend and create standards.
• Review of open-source development libraries for security risks.
• Web application firewall (WAF) rule development and implementation.
• Security technologies review and recommendations.

• Bachelor of Computer Science or similar – 6 or more years of experience in applying Information Security best practices to Information Technology assets plus 5 or more years of experience with software development.
• Experience with static and dynamic vulnerability identification using industry leading scanning tools and manual code reviews.
• Experience with the Top 10 OWASP (Open Web Application Security Project) vulnerabilities and how to identify and remediate them.
• Solid understanding of Information Security and the behaviors that would secure TSYS information assets.
• Ability to translate Information Security policies and procedures into language that a business and/or technical person can understand, and effectively communicate with both non-technical and technical people.
• Strong problem solving with the ability to methodically and objectively analyze and resolve Information Security challenges.
• Ability to work well inside and outside the team.
• Please be informed that at this time all the positions do not have any relocation package, or the flexibility to work remotely, and do not offer any work permit; all the candidates must have their own authorization paperwork.

Interested! Send your updated CV and answer the questions below: