Report this Job
Job Description
:
Support the design of proactive application security frameworks to ensure the secure architecture and development of business solutions. This includes frameworks for performing consistent application security assessments and threat models as well as the development of secure design patterns and development standards.
Implementation of the above controls into a modern SDLC.
Conduct application security assessments, threat modeling and architecture reviews
Proactively communicate design and development principles to appropriate stakeholders
Proactively improve security designs to reduce vulnerabilities found after development of code
Influence stakeholders to correct security deficiencies in the solution design as well as developed code
Provide solutions to security deficiencies while allowing for necessary business and technical functionality
Automation and standardization of all applicable processes
Required Qualifications:
Technical Competencies
In depth comprehension of the OWASP Top 10 and an ability to communicate with developers and application architects. Development or software architecture background is preferred.
Experience working with application security frameworks such as BSIMM and SAMM
Expertise in performing cloud architecture reviews, application risk assessments and threat modeling
Experience in integrating security controls into all forms of SDLC including automation into a CI/CD pipeline
Analyzes business impact and exposure based on emerging security threats, vulnerabilities and risks, and recommends technologies and solutions to mitigate them.
Implement security considerations for in house developed, COTS and SaaS solutions
Translates technical concepts into plain language to show business risk
Collaborates with developers and software architects to adjust designs to securely meet business and technical requirements
Cultural Competencies
o Comfortable operating in an environment with constant change and ambiguity
o Demonstrated experience mentoring others by providing technical guidance to project teams
o Build relationships with development, software architecture and product management stakeholders
o Experience working in highly regulated environments subject to HIPAA, HITrust, PCI or other related
Preferred Qualifications:
o Bachelor's degree in an IT-related field strongly preferred; post-graduate degree is a bonus, but not required
o Knowledge and experience with the configuration of security controls and secure migration of enterprise applications to one of the major cloud providers such as Azure (preferred), Amazon Web Services, or Google Cloud.
o Experience with CI/CD pipelines
o Automation and standardization of software security controls, particularly into a CI/CD pipeline
o Communicate the need for security controls to a business audience, including justification of spend and effort
o CISSP, CISM or equivalent
o GIAC or Offensive Security certifications
o Cloud Architecture and/or Cloud Security Certifications (AWS, Azure, GCP)
o Cloud Security Alliance (CCSP, CCSK) (ISC)2
#LI-INPAS
About NTT DATA Services
NTT DATA Services is a recognized leader in IT and business services, including cloud, data and applications, headquartered in Texas. As part of NTT DATA, a $30 billion trusted global innovator with a combined global reach of over 80 countries, we help clients transform through business and technology consulting, industry and digital solutions, applications development and management, managed edge-to-cloud infrastructure services, BPO, systems integration and global data centers. We are committed to our clients long-term success. Visit (link removed) or LinkedIn to learn more.
NTT DATA Services is an equal opportunity employer and considers all applicants without regarding to race, color, religion, citizenship, national origin, ancestry, age, sex, sexual orientation, gender identity, genetic information, physical or mental disability, veteran or marital status, or any other characteristic protected by law. We are committed to creating a diverse and inclusive environment for all employees. If you need assistance or an accommodation due to a disability, please inform your recruiter so that we may connect you with the appropriate team.
Employement Category:
Employement Type: Full time
Industry: IT Services & Consulting
Role Category: General / Other Software
Functional Area: Not Applicable
Role/Responsibilies: Cloud Architect-Solicited
NTT Global Delivery
