security architect

security architect

Austin
Permanent
23.05.2021
Competitive

Security Architect

As a Security Architect, you will be responsible for driving the security and usability of the infrastructure on which our business products and corporate services run on, such as digital self-care technologies, primary healthcare care services including virtual consultations (telemedicine) and business insights, alongside our collaboration tools, office networks and endpoints, amongst others. You will help in shaping our enterprise security universe, identify and push for delivery of solutions to architectural security problems, and work with various technology and business teams to ensure business and security objectives are aligned.

Key Responsibilities

  • Contributes to the development of enterprise security architecture, including the instatement of processes, standards, design patterns and architecture blueprints including metrics and KPIs
  • Works with and guides IT architects and engineers to integrate security within the company’s projects and solutions to ensure security is built into key enterprise services
  • Acts as subject matter expert on security architecture and secure designs
  • Manages relationships with security vendors
  • Provides security consultation for teams and projects including end to end risk assessments
  • Develops security design and implementation methodologies, templates and patterns that mitigate the risks and conform to legislation and regulations and meet business needs
  • Oversees and reviews threat modelling, control design and security testing activities, performs code reviews on security implementation changes
  • Supports security engineers in the implementation of secure engineering principles
  • Researches new technologies, standards and engineering methods, assesses security advantages and vulnerabilities of emerging technologies
  • Provides security design advice to commercial and product teams, ensuring that security requirements are established for the development of new and enhanced services.

Key Skills Required

  • Strong technical background, with a firm understanding of enterprise systems
  • Policy and process development for the integration of security architecture throughout the IT organization
  • Strong foundation in various network and host security domains such as cloud computing, virtualization, remote access, network availability and resiliency, device hardening, network segmentation and zoning, mobility, collaboration and more
  • Deep understanding of the TCP/IP protocol stack and major protocols
  • Experience in security controls for WAN, LAN, and WLAN architectures
  • Experience in defining security architecture roadmaps for a large or complex organizations
  • Good knowledge of common security architectures (e.g. TOGAF, SABSA, OSA) and security architecture standards
  • In depth understanding of security threats, attack patterns, common and emerging security vulnerabilities and how they manifest themselves in different types of infrastructure environments, networks and applications
  • Understands the legal and regulatory environment within which the business operates and has knowledge of relevant security related legal and regulatory requirements
  • Extensive threat modelling experience
  • Good cryptography knowledge and implementation expertise
  • Strong communication and influencing skills
  • Basic knowledge of information security risk management methodologies and best practices

Person Specification

  • Inquisitive mind, critical thinker, excellent problem solving skills
  • Strong attention to detail
  • Tenacious nature, works well under pressure
  • Is practical, able to apply theoretical / academic principles in a practical, consumable manner
  • Fast learner – committed to continual learning, willing to expand skill set and rapidly understand new technologies
  • Creative and pragmatic, always seeking to achieve the best achievable outcome
  • Works in a collaborative way, respects the views and ideas of others
  • Works in a straight-forward and inclusive way and is non-political
  • Is tenacious, in the pursuit to delight our users.
  • Strives for excellence in all they do and always look to improve our service and product
  • Regularly seeks to turn ideas into action and injects creativity into every touch point
  • Questions common practice to challenge the norm
  • Has a can-do attitude and a positive viewpoint
  • Takes ownership and always delivers against what is agreed.

Qualifications

And Experience

  • 4+ years demonstrating expertise in security architecture
  • 8+ years information security experience
  • Proven track record in successfully designing and delivering enterprise security solutions in a fast-paced, multi-cloud environment
  • Desirable
  • Graduate / post graduate study in computing / security related field
  • Previous experience in healthcare industry
  • Solid understanding of ISO2700 series, NIST control framework, CSA or similar experience
  • Privacy knowledge desirable (GDPR)
  • Security certifications such as: CISSP, CCSP, or similar.

Apply for this Job

Please enter your full name.

Enter a valid email address.

Upload your CV to accompany your application for this job.

Fields marked with * are required.

Senior Security Software Engineer

Senior Security Software Engineer (Fully remote / Up to £150,000):  Join one the fastest growing SaaS providers as a Senior Security Software Engineer and gain access to some of

Read More »
Application Security Engineer

Application Security Engineer A global SaaS company are looking for an Application Security Engineer to join their team. The company is undergoing a company-wide security transformation, looking for an

Read More »
Application Security Engineer

Application Security Engineer A global SaaS company are looking for an Application Security Engineer to join their team. The company is undergoing a company-wide security transformation, looking for an

Read More »
Senior DevSecOps Engineer

Senior DevSecOps Engineer:  Join a growing health-Tech organisation with global reach as a DevSecOps Engineer. You’ll work closely with an award-winning security team and some of the best in

Read More »
Senior Systems Engineer

Senior Systems Engineer A leading cyber security consultancy are looking for a Senior Systems Engineer to join their UK team. They are looking for advanced technical

Read More »
Senior DevSecOps Engineer

Senior DevSecOps Engineer:  Join a growing health-Tech organisation with global reach as a DevSecOps Engineer. You’ll work closely with an award-winning security team and some of the best in

Read More »