Senior Security Architect

- Design and establish enterprise application security architecture frameworks that align with business goals and risk appetites - Lead architectural assessments of applications and systems to pinpoint security vulnerabilities and suggest pertinent controls - Develop and sustain security baselines, standards, and practices for various technology stacks (web, mobile, API, microservices) - Create and refine threat modeling strategies (STRIDE, PASTA, OCTAVE) and guide threat modeling workshops with development teams - Define secure coding protocols and security specifications for different application categories based on data classification and risk assessments - Architect security solutions for authentication, authorization, encryption, and secure communication channels - Set up security guardrails for cloud-native applications, serverless architectures, and infrastructure-as-code models - Design and implement API security measures including OAuth/OIDC flows, API gateways, and rate limiting strategies - Integrate security architecture principles into CI/CD workflows to bolster DevSecOps initiatives - Assess and propose suitable security tools and technologies for the enterprise security stack - Develop comprehensive security architecture roadmaps and oversee the implementation of security capabilities - Collaborate with development teams to engineer secure solutions that balance security necessities with business demands - Spearhead strategic security projects with a broad organizational impact - Utilize GenAI technologies to enhance security architecture evaluations and automate security reviews - Maintain thorough documentation of security architecture choices, patterns, and reference implementations - Create and deliver training sessions on security architecture to enhance security awareness among developers and architects - Stay informed about emerging security threats, technologies, and architectural methodologies - Conduct security design reviews for new applications and significant modifications to existing applications - Design secure data handling practices, including encryption for data at rest and in transit.