Application Security Engineer​/Architect

Application Security Engineer/Architect

12 Months contract – Later hire

Newark, NJ - Hybrid Model

• Interview: ASAP and
  
  Start Date:
  
  ASAP
• Locals candidates preferred or nearby states candidates preferred

• The Enterprise Information Security Architect is responsible for developing and maintaining enterprise-wide security architecture by combining business process analysis with deep technical expertise.
• The role involves leading cross-functional teams, assessing systems and applications for security risks, defining long-term security strategy, establishing security standards, and guiding their implementation.
• The architect works closely with business, IT, and system owners to ensure that security designs align with business requirements. This position reports to the Director of Technology Architecture and provides expert technical guidance on security technologies and engineering decisions.

• Bachelor’s degree in IT or related field (advanced degree or MIS certification preferred)
• Professional experience in Security Architecture, including:
• Application security
• Infrastructure security
• Internet/external security
• Access & Identity Management (IAM)
• Knowledge of information privacy and security laws (data breaches, records management, structured/unstructured data)
• Hands‑on experience reviewing code for security vulnerabilities
• Experience with internal and external application security assessments
• Strong understanding of the Secure Development Lifecycle (SDLC)
• Ability to defend against OWASP Top 10 attack types
• Deep understanding of SSL capabilities, limitations, and importance
• Programming experience with C, C++, Python, Ruby, etc.
• Experience with:
• Vulnerability assessments and penetration testing
• Remediation of security vulnerabilities
• Data encryption solutions
• ITCAM/SOA

• 5 years of management experience (preferred)
• Experience in a regulated environment
• Strong understanding of application security principles
• Ability to explain AAA:
  Authentication, Authorization, Audit
• Strong knowledge of TOGAF and ability to articulate its relevance