Information Security Architect

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 24%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

US Anesthesia Partners

Site WebLinkedInTous les Emplois

5001 - 10000 employés

Fondée en 2012

💼 Conseil

🏥 Santé

⚕️ Assurance santé

Consulting • Healthcare • Healthcare Insurance

US Anesthesia Partners est un fournisseur de premier plan de services d'anesthésie complets, dédié à offrir des soins exceptionnels aux patients et une excellence opérationnelle. Fondée par une équipe d'anesthésistes visionnaires, USAP se spécialise dans divers domaines de l'anesthésiologie, notamment les soins cardiovasculaires, l'obstétrique et la pédiatrie. Avec un réseau de milliers de cliniciens et des centaines de partenaires d'établissements à travers le pays, ils servent plus de deux millions de patients chaque année, cherchant à redéfinir les normes de qualité des services d'anesthésie.

Description

• Establish and enforce secure software development standards and cloud security best practices • Lead the security lifecycle by reviewing emerging technologies, threats, and trends and maturing end-of-life governance for applications and technologies • Participate in and mature the Architectural Review Board by applying a security-focused mindset across all IT domains • Review application architecture documentation, including diagrams and runbooks, with a security-focused lens • Partner with engineering and DevOps teams to embed security governance and best practices into CI/CD pipelines • Conduct architecture risk assessments, threat modeling, and secure design reviews for new and existing applications • Develop security reference architectures, design patterns, and technical standards for cloud-native applications • Lead application security initiatives including SAST, DAST, software composition analysis (SCA), Infrastructure as Code (IaC) scanning, container security, and API security • Work directly with the enterprise architect to ensure enterprise security architecture, governance, and guidance are executed across all IT domains • Evaluate cloud services and third-party technologies for security risks and compliance requirements • Collaborate with security operations, infrastructure, compliance, and engineering teams to investigate and resolve security findings • Act as a trusted advisor to development, infrastructure, network, cloud, data, and security teams • Ensure cloud applications comply with organizational policies and regulatory frameworks such as PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR • Provide technical leadership and mentorship to development teams on secure coding practices and cloud security • Perform other duties as assigned by management

🎯 Exigences

• Bachelor’s degree in computer science, business, or a related field required, or equivalent work experience • 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures • Strong understanding of secure software development lifecycle (SSDLC) and DevSecOps practices • Strong knowledge of secure coding principles and common application vulnerabilities, including OWASP Top 10 and API Security Top 10 • Solid knowledge and experience working with Azure DevOps technology, with focus on CI/CD pipelines and Git repositories • Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management, and Zero Trust principles • Strong familiarity with SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management platforms • Experience in healthcare is preferred • CISSP certification is preferred • Ability to understand and translate business needs, aligning them to proper technical application solutions • Ability to translate security policy, regulatory requirements, and risk findings into practical architecture guidance • Excellent communication and collaboration skills with the ability to work with multiple teams simultaneously • Excellent time management skills and ability to work on multiple business-critical projects simultaneously • Understanding of core security and compliance principles in a healthcare environment • Strong analytical and problem-solving skills with the ability to solve complex technical problems

🏖️ Avantages

• No specific benefits or compensation extras stated in the posting