Looking for Application Security Architect in Louisville, KY (CPT,OPT,H1 Transfer are notacceptable)

Visa-(CPT,OPT,H1 Transfer are not acceptable)


Title – Application Security Architect
Location: Louisville, KY
Duration: 12+months
 
Description:-
Minimum 7+ Years of experience
Required Skill Set:-

• 7-12 years of experience in application security, with experience in secure
• application architecture, design reviews, threat modelling and performing
• application decomposition and security assessments
• Main tasks
• Application Security architecture and design review
• Performing evaluation and assessment of SDLC processes and security
• controls
• Performing application decomposition and analyzing security issues
• Experience doing threat modelling and application risk analysis
• Experience with both dynamic and static analysis tools (e.g., Checkmarx,
• IBM Appscan)
• Experience in evaluating app sec processes to identify improvements and
• envision/develop automation within CI/CD pipelines
• Must have good leadership and customer facing communication skills
• Ability to strategize and evangelize application security objectives and also
• recommend approach for operationalization
• Deep knowledge of application architecture, and key aspects of cloud
• security related services and controls
• Knowledge of BSIMM Software Security Maturity model.

 
Desired Competencies:-

• 7-12 years of Application Security experience with at least 4-5 years of
• architecture and design review experience
• Strong knowledge of designing, deploying, and maintaining security
• architectures in critical business applications
• Proven understanding of how to conduct end-to-end application security
• assessment with application decomposition
• Experience in performing evaluation and assessment of SDLC processes and
• security controls
• Experience in performing application decomposition and analyzing security
• issues
• Experience in threat modelling and application risk analysis
• Experience in evaluating app sec processes to identify improvements and
• envision/develop automation within CI/CD pipelines
• Experience in developing testing scripts and procedures
• Experience with vulnerability scanning tools (e.g., Qualys)
• Experience with web application vulnerability scanning tools (e.g., IBM AppScan,
• Burpsuite Pro)
• Experience with static analysis tools (e.g., Checkmarx)
• Good knowledge and experience on Application Security Testing (DAST, SAST)
• Experience with industry standard application security testing tools (commercial
• and open source)
• Experience with SQL, and experience in .NET, JAVA development platforms.

 
Good-to-Have:-

• Experience in testing and assessing security of APIs and mobile applications
• Possess current security certifications (e.g., CEH) but not mandatory.
• Experience with vulnerability scanning tools (e.g., Qualys, Nessus, Nexpose,
• Saint)
• Experience in conducting various types of application penetration tests.
• Knowledge of micro service architecture
• Knowledge of cryptographic tools or security APIs.

Responsibility of / Expectations from the Role:-

• Managing the application risk assessments and application security assessments
• Ensuring adherence to application security policies and procedures
• Enhancing SDLC processes and security related requirements.

Regards,
Naman Shukla
Talent Solutions | Digital Transformation | Data Analytics
US: +1 (904)-406-8313
11340 Lakefield Drive, Suite #200, Johns Creek, GA 30097
E-mail: naman.shukla@nlbservices.com| Web: www.nlbservices.com
Hangout : naman.hukla@nlbservices.com
linkedin.com/in/naman-shukla-a5124228
 An ISO 27001 and 20000-1 Certified & Minority Business Enterprise (CMBE)

If you would prefer to no longer receive any emails from this Company, you may opt out at anytime by clicking here.