Information Security Architect

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 24%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

US Anesthesia Partners

Site WebLinkedInTous les Emplois

5001 - 10000 employés

Fondée en 2012

💼 Conseil

🏥 Santé

⚕️ Assurance santé

Consulting • Healthcare • Healthcare Insurance

US Anesthesia Partners est un fournisseur de premier plan de services d'anesthésie complets, dédié à offrir des soins exceptionnels aux patients et une excellence opérationnelle. Fondée par une équipe d'anesthésistes visionnaires, USAP se spécialise dans divers domaines de l'anesthésiologie, notamment les soins cardiovasculaires, l'obstétrique et la pédiatrie. Avec un réseau de milliers de cliniciens et des centaines de partenaires d'établissements à travers le pays, ils servent plus de deux millions de patients chaque année, cherchant à redéfinir les normes de qualité des services d'anesthésie.

Description

• Establish and enforce secure software development standards and cloud security best practices • Lead the security lifecycle by reviewing emerging technologies, threats, and trends and maturing end-of-life governance for applications and technologies • Participate in and mature the Architectural Review Board by applying a security-focused mindset across IT domains • Review application architecture documentation, including diagrams and runbooks • Partner with engineering and DevOps teams to embed security governance and best practices into CI/CD pipelines • Conduct architecture risk assessments, threat modeling, and secure design reviews • Develop security reference architectures, design patterns, and technical standards for cloud-native applications • Lead application security initiatives including SAST, DAST, software composition analysis, IaC scanning, container security, and API security • Work with the enterprise architect to execute enterprise security architecture, governance, and guidance across IT domains • Evaluate cloud services and third-party technologies for security risks and compliance requirements • Collaborate with security operations, infrastructure, compliance, and engineering teams to investigate and resolve security findings • Act as a trusted advisor to development, infrastructure, network, cloud, data, and security teams • Ensure cloud applications comply with organizational policies and frameworks including PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, and GDPR • Provide technical leadership and mentorship on secure coding practices and cloud security • Perform other duties as assigned by management

🎯 Exigences

• Bachelor’s degree in computer science, business, or a related field required (or equivalent work experience) • 7+ years of experience securing enterprise environments across on-premises, hybrid, and cloud infrastructures • Strong understanding of secure software development lifecycle (SSDLC) and DevSecOps practices • Strong knowledge of secure coding principles and common application vulnerabilities (OWASP Top 10, API Security Top 10) • Solid knowledge and experience working with Azure DevOps technology, with focus on CI/CD pipelines and Git repositories • Strong knowledge of identity and access management, authentication, authorization, OAuth, OpenID Connect, SAML, risk management, and Zero Trust principles • Strong familiarity with SIEM, EDR/XDR, IAM, PAM, CASB, DLP, and vulnerability management platforms • Experience in healthcare is preferred • CISSP certification is preferred • Ability to understand and translate business needs into proper technical application solutions • Ability to translate security policy, regulatory requirements, and risk findings into practical architecture guidance • Excellent communication and collaboration skills • Excellent time management skills and ability to manage multiple business-critical projects simultaneously • Understanding of core security and compliance principles in a healthcare environment • Strong analytical and problem-solving skills for complex technical problems