NOTE No Security Clearances required, but must be a US Citizen As the Senior Lead Application Security Architect, you will drive information security practices and processes for application development throughout the organization. You will also develop, craft, and maintain security strategies, requirements, standards, and guidelines. You will manage the compliance of systems design and architecture against policies and standards as a function of an end-to-end SDLC project lifecycle. The success in this role will demonstrate itself through the following attributes and skills Knowledge of hotel-based Information Technology (IT) systems and applications Working knowledge of one or more of the following technologies Atlassian Stack, Node.js, React, Relay, Graphql, and NOSQL databases such as Couchbase Experience developing and authoring application security architectures, standards, and guidelines Experience communicating application security requirements and risk to IT teams and business partners Experience reviewing application design, software framework, and infrastructure to identify risks and vulnerabilities Capable of assessing underlying components (e.g., databases, servers), configuration, and security access controls Experience performing web application and web services (REST) security testing, as well as analyzing findings and providing mitigation recommendations Experience with static code scan tools (e.g., Fortify, Checkmarx) and dynamic scanning tools (e.g., Appscan, Burp, Qualys) Deep understanding of enterprise, network, system, and application-level security issues as well as enterprise computing environments and distributed applications Experience with industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing (e.g., GDPR, ISO 27001, Cloud Security Alliance, NIST 800-53, PCI DSS, SOC2) Deep understanding of encryption technologies, Java, Linux, and Microsoft implementations To fulfill this role successfully, you must possess the following minimum qualifications and experience BABS Bachelor's Degree or an Associate's Degree plus eight (8) years of related IT experience or a High School DiplomaGED plus twelve (12) years of related IT experience Six (6) years of experience combined with exposure to product development and web development on J2EE platforms Travel up to 30 of the time It would be advantageous in this position for you to demonstrate the following capabilities and distinctions MAMS Master's Degree in Information Technology, Computer Science or Computer Engineering One (1) year of experience working with AWSAzure Cloud design and architecture such as SaaS, IaaS, andor PaaS Certifications in CISSP, CISM, CEH, CWSP, or GCWN
* The salary listed in the header is an estimate based on salary data for similar jobs in the same area. Salary or compensation data found in the job description is accurate.