Job Description
Job Description: • Architect Secure Applications: Design, implement, and oversee security controls and practices for applications, APIs, and microservices within cloud environments, primarily Microsoft Azure. • Integrate Security into SDLC: Lead the integration of security best practices into the development lifecycle, including secure coding guidelines, code reviews, and automated security testing. • Perform Threat Modeling: Conduct threat modeling exercises to proactively identify vulnerabilities and recommend actionable mitigation strategies. • Advise on Secure Technologies: Evaluate and recommend tools, technologies, and methodologies to enhance application security aligned with Strada's technology strategy. • Continuous Security Testing: Oversee and enhance processes for static and dynamic application security testing (SAST/DAST), penetration testing, and vulnerability assessments. • Developer Collaboration: Collaborate with global development teams to build security awareness, providing coaching, training, and resources to foster secure coding practices. • Incident Response Support: Support application-level security incident investigations, providing technical expertise to ensure timely resolution and remediation. • Maintain Compliance: Ensure application security practices meet global regulatory requirements and internal policies. Requirements: • Experience: 7+ years in cybersecurity, with at least 4 years focused specifically on application security architecture and secure software development practices. • Technical Skills: Deep expertise in application security frameworks (e.g., OWASP), secure coding practices, security testing tools (SAST, DAST), penetration testing, and cloud security, especially within Microsoft Azure. • Certifications: Relevant certifications such as CISSP, CSSLP, OSCP, or other security and cloud architecture certifications are highly desirable. • Communication Skills: Exceptional ability to communicate complex security concepts clearly to developers, technical stakeholders, and senior leadership. • Analytical and Problem-Solving Skills: Proven ability to analyze complex security issues, threats, and vulnerabilities, and develop practical solutions. • Collaboration: Strong interpersonal skills, with experience working effectively across globally distributed teams. Benefits: • health coverage • wellbeing programs • paid leave (vacation, sick, parental) • retirement plans • learning opportunities • and more Apply tot his job