Application & Platform Security Architect

🕒 il y a 2 mois

🤠 Texas – Distant

🤠 Texas – Remote

💵 $141 500 - $268 500 / an

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

👻 Score fantôme 35%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

AbbVie

Site WebLinkedInTous les Emplois

10 000+ employés

Fondée en 2013

🏥 Santé

💼 Conseil

🏭 Fabrication

Healthcare • Consulting • Manufacturing

AbbVie est une entreprise pharmaceutique mondiale qui découvre et fournit des médicaments et des solutions innovants pour améliorer les vies. Axée sur le traitement des défis de santé les plus difficiles au monde, AbbVie opère dans plus de 175 pays, offrant une large gamme de produits dans des domaines tels que l'immunologie, l'oncologie, les neurosciences et les soins esthétiques. Engagée dans l'innovation scientifique, AbbVie investit massivement dans la recherche et le développement, visant à produire des médicaments de premier ordre. L'entreprise met également l'accent sur la diversité au sein du lieu de travail, la durabilité et les initiatives de soutien aux patients, assurant un impact positif tant pour ses patients que pour la communauté au sens large.

Description

• Define reusable security architecture patterns and guardrails to enable consistent, secure implementation across high-risk business applications. • Drive secure-by-design initiatives by integrating security considerations early in the software architecture lifecycle and influencing enterprise architecture direction. • Represent security architecture in design authority boards and technical review councils, advocating for risk-based security controls. • Work with in-business IT customers, including application architects and engineers to evaluate application software and infrastructure designs, for the purpose of defining/designing application controls aligned with enterprise standards. • Define application-specific security control architectures and produce design artifacts to guide secure implementation of business-critical systems. • Develop re-usable implementation guidance and design patterns based on previous engagements to scale the service. • Work with information security leadership to develop strategies and plans to enforce security requirements and address identified risks in the infrastructure and applications. • Act as a security architecture liaison to IT delivery and engineering teams, embedding security principles into technical delivery and architecture review forums. • Support security aspects of business & IT initiatives by assisting in architecture, design, implementation, deployment, and operational transition of innovative & secure technology solutions. • Research, evaluate, design, test, recommend and plan the implementation of new or updated information security technologies. • Establish collaborative working relations with IT functions to ensure that solutions align with security architecture and business strategy. • Play an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned. • Complete remediation activities and initiate actions to ensure that compliance and security gaps are successfully addressed. • Research and assess new information security threats and recommend remedial actions. • Foster an information security culture through education, skill development, and implementation of effective information security processes and practices.

🎯 Exigences

• Bachelor’s degree and 9 years of experience OR Master’s Degree and 8 years of experience OR PhD and 4 years of experience in information security and/or related functions (IT Audit, Risk Management or Security Architecture). • Must have demonstrated exceptional ability to assess and communicate information security concepts and practices, with both business and IT stakeholders. • Requires in-depth knowledge of the systems development life cycle, client area’s functions and systems, and systems applications programs development technological alternatives. • Proven implementation of creative technology solutions that advance the business. • Strong understanding of application security principles, including OWASP Top 10, SANS/CWE Top 25, and secure coding practices. • Expertise in secure session management, token handling, and authentication mechanisms (OAuth, SAML, OpenID Connect). • Knowledge of cryptographic practices, encryption protocols, and PKI management. • Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP). • Familiarity with tools for code analysis (e.g., SonarQube, Veracode) and vulnerability scanning (e.g., Burp Suite, Nessus). • Understanding of DevSecOps practices, including securing CI/CD pipelines. • Self-starter with the ability to work independently and manage multiple projects simultaneously. • Strong problem-solving and analytical skills with the ability to identify security risks and propose effective solutions. • Ability to work collaboratively in cross-functional teams and influence technical teams towards secure implementations. • Understanding of cloud computing principles, including virtualization, containerization, microservices, and serverless computing; • Advanced knowledge of Identity Security concepts, least-privilege, separation of duties, and Zero trust design principles.

🏖️ Avantages

• Paid time off (vacation, holidays, sick) • medical/dental/vision insurance • 401(k) to eligible employees. • long-term incentive programs.