Job Description

Client Job ID: 139811-1

Locations:

• Strongsville, OH

• Pittsburgh, PA

• Dallas, TX

• Birmingham, AL

• Phoenix, AZ

  Must Have Technical Skills:

• Overall experience 6+ years

• Deep understanding of API security best practices (OWASP API Security Top 10)

• Experience with API security tools and methodologies (penetration testing, API gateways)

• Strong knowledge of cryptography and authentication protocols

• Excellent communication and collaboration skills to work with developers and cross-functional teams

• Frameworks - API security frameworks, various API patterns,

• Strong Secure by Design Experience - knowing how to build a system securely from scratch

• Ability to explain why they would recommend a certain course of action in meetings

  Soft Skills:

• Presenting, Stand out in front of leadership.

• Articulate, Ability to explain why they would recommend a certain course of action in meetings

• Excellent communication and collaboration skills to work with developers and cross-functional teams

  Roles and Responsibilities:

• Attend Team meetings and Weekly SSG meetings.

• Focused on building roadmap on different activities to build the program including dashboards.

• Provide design guidance accordingly

• Collaborate with stakeholders to define an API security strategy aligned with the overall business objectives

• Design a secure API architecture. The may involve utilizing secure design patterns, encryption protocols, and authentication/authorization mechanisms

• Develop a comprehensive framework for API security that defines procedures for API threat modeling, vulnerability assessments, penetration testing, etc.

• Support the configuration of API gateways to enforce security policies, rate limiting, access control

• Design and implement robust authentication and authorization mechanisms to control access to API resources based on user roles and permissions. This may include OAuth, OpenID Connect, or API key management solution.

• Build actionable insight and intelligence that include suspicious activity, potential attacks, and API misuse.

• Educate developers on API security best practices.

• Communicate API security risks effectively to stakeholders, including developers, product managers, and line of business leadership.

  Summary:

  The main function of a security architect is to plan, coordinate, and implement security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information.

  Job Responsibilities:

• Identify security issues and risks, and develop mitigation plans

• Architect, design, implement, support, and evaluate security-focused tools and services including project leadership roles

• Develop and interpret security policies and procedures

• Participate in security compliance efforts

• Develop and deliver training materials and perform general security awareness and specific security technology training

• Evaluate and recommend new and emerging security products and technologies

  Skills:

• Strong communication skills, written and verbal

• Strong analytical skills

• Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security

• Consistent implementation of security solutions

• Experience in infrastructure or application-level vulnerability testing and auditing

  Education/Experience:

• Bachelor's degree in a technical field such as computer science, computer engineering or related field required

• 5-7 years experience
  • **Only those lawfully authorized to work in the designated country associated with the position will be considered.**
  • **Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client’s business needs and requirements.**

Benefits:

For information and details on employment benefits offered with this position, please visit . Should you have any questions/concerns, please contact our HR Department via our secure .

California Pay Equity:

For information and details on pay equity laws in California, please visit the State of California Department of Industrial Relations' website .

Rose International is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender (expression or identity), national origin, arrest and conviction records, disability, veteran status or any other characteristic protected by law. Positions located in San Francisco and Los Angeles, California will be administered in accordance with their respective Fair Chance Ordinances.

If you need assistance in completing this application, or during any phase of the application, interview, hiring, or employment process, whether due to a disability or otherwise, .

Rose International has an official agreement (ID #132522), effective June 30, 2008, with the U.S. Department of Homeland Security, U.S. Citizenship and Immigration Services, Employment Verification Program (E-Verify). (Posting required by OCGA 13/10-91.).

Job Tags

Similar Jobs