Security Architect with RISK Skills Salary

Produce management reporting, including appropriate metrics that inform senior leadership as to the state of information risk and exposure Recognizes and identifies potential areas where existing security polices and procedures require change, or where new ones need to be developed, especially regarding future business expansion Provide information security matter expertise to technology teams and projects Evaluate and recommend security softwarehardware and its integration into existing architecture (Proof of Technology) Consult with business clients and 3rd parties on security architecture Research and benchmark security infrastructure technologies as it relates to the organization Ensure that the organization is leveraging the proper technologies to meet SOX, PCI, and CPNI compliance.

Performs gap analyses across the organization to identify and document risk and to identify unnecessary complexity in existing processes and procedures.

Provide specialized consulting to projects that require additional expertise by connecting projects teams with the appropriate internal and external experts Anticipate and plan for new technologies or major changes in existing applicationinfrastructure landscape Create architecture and technical design documents to communicate solutions that will be implemented by development teams Review project user stories to assess overall impact to security Perform vulnerability testing, risk analysis and security assessments on technologies Requirements 6+ years of IT application development related experience Experience in server and network virtualization technologies Experience with network and security technologies Ability to lead work groups related to strategic initiatives and best practices Preferred Experience with cloud computing concepts Experience with Microsoft Azure Experience with PKI technologies Experience with OIDCOAuth Please note Candidates may need to pass a drug andor background check.

Required Competencies Demonstrated competence with the following practices and concepts Computer Forensics - Understands basic concepts of the full life-cycle of forensic investigation and analysis Configuration Management - knowledge of the principles and methods for control of changes made to information systems components Encryption - Knowledge of procedures, tools, and applications used to keep data or information secure Network Security - Knowledge of methods, tools, and procedures, to protect the organization s system boundaries and to prevent information systems vulnerabilities and restore security of information systems network services Gained proficiency with the following classes of security tools Vulnerability Risk Management (VRM) Security information Event management (SIEM) Intrusion DetectionPrevention System (IDSIPS) and Firewall tools Endpoint Detection and Response (EDR) Anti-virus products User Behavior Analytics (UBA) Experience with the following technologies (as it relates to using, deploying, and securing) MacOS (desktop), Linux (server), and Windows (desktop and server) Cisco Meraki network appliances and tools Scripting skills, such as bash, Ruby, Python Distributed source control systems (we use Git) IaaS concepts, such as AWS, Google Cloud, or Azure Bonus Points for Experience with automation and configuration version control (e.