Information Security Architect

🕒 Setembro 1

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 31%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

US Anesthesia Partners

SiteLinkedInTodas as Vagas

5001 - 10000 funcionários

Fundada em 2012

💼 Consultoria

🏥 Saúde

⚕️ Seguro de Saúde

Consulting • Healthcare • Healthcare Insurance

US Anesthesia Partners é um provedor líder em serviços completos de anestesia, dedicado a oferecer cuidado excepcional ao paciente e excelência operacional. Fundada por uma equipe de anestesiologistas inovadores, a USAP se especializa em várias áreas da anestesiologia, incluindo cuidados cardiovasculares, obstetrícia e pediatria. Com uma rede de milhares de clínicos e centenas de parceiros de instalações em todo o país, eles atendem mais de dois milhões de pacientes anualmente, com o objetivo de redefinir os padrões de qualidade nos serviços de anestesia.

Descrição

• Establish and enforce secure software development standards and cloud security best practices • Lead the security lifecycle by reviewing emerging technologies, threats, and trends and maturing end-of-life governance for applications and technologies • Participate in and mature the Architectural Review Board by applying a security-focused mindset across all IT domains • Review application architecture documentation, including diagrams and runbooks, with a security-focused lens • Partner with engineering and DevOps teams to embed security governance and best practices into CI/CD pipelines • Conduct architecture risk assessments, threat modeling, and secure design reviews for new and existing applications • Develop security reference architectures, design patterns, and technical standards for cloud-native applications • Lead application security initiatives including SAST, DAST, software composition analysis (SCA), Infrastructure as Code (IaC) scanning, container security, and API security • Work directly with the enterprise architect to ensure enterprise security architecture, governance, and guidance are executed across all IT domains • Evaluate cloud services and third-party technologies for security risks and compliance requirements • Collaborate with security operations, infrastructure, compliance, and engineering teams to investigate and resolve security findings • Act as a trusted advisor to development, infrastructure, network, cloud, data, and security teams • Ensure cloud applications comply with organizational policies and regulatory frameworks such as PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR • Provide technical leadership and mentorship to development teams on secure coding practices and cloud security • Perform other duties as assigned by management

🎯 Requisitos

• Bachelor’s degree in computer science, business, or a related field required, or equivalent work experience • 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures • Strong understanding of secure software development lifecycle (SSDLC) and DevSecOps practices • Strong knowledge of secure coding principles and common application vulnerabilities, including OWASP Top 10 and API Security Top 10 • Solid knowledge and experience working with Azure DevOps technology, with focus on CI/CD pipelines and Git repositories • Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management, and Zero Trust principles • Strong familiarity with SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management platforms • Experience in healthcare is preferred • CISSP certification is preferred • Ability to understand and translate business needs, aligning them to proper technical application solutions • Ability to translate security policy, regulatory requirements, and risk findings into practical architecture guidance • Excellent communication and collaboration skills with the ability to work with multiple teams simultaneously • Excellent time management skills and ability to work on multiple business-critical projects simultaneously • Understanding of core security and compliance principles in a healthcare environment • Strong analytical and problem-solving skills with the ability to solve complex technical problems

🏖️ Benefícios

• No specific benefits or compensation extras stated in the posting

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo