Security Architect - DevSecOps Cyber security

Responsibilities

• Lead execution of hands-on engagements and development of deliverables from start to finish, leading teams in analyzing requirements and working closely with other team members to produce prioritized results aligned to client needs and risk profile.
• Provide expert advice on best practices for managing the cyber security risks during digital transformation as organizations adopt cloud, devops, and new architecture frameworks such as containerization, microservices and zero trust.
• Conduct security reviews and maturity assessments across technology and business teams to address cyber risk and provide clear, and organized risk findings and recommendations to clients.
• Experience as trusted engineer with customers engineering teams

Minimum qualifications

• 8+ years of total IT experience
• 5+ yearsconsulting experience working in Security in an enterprise environment.
• Extensive experience in information security and/or IT risk management with a focus on security, performance and reliability.
• Solid understanding of security protocols, cryptography, authentication, authorisation and security.
• Good working knowledge of current IT risks and experience implementing security solutions.
• Experience implementing multi-factor authentication, single sign-on, identity management or related technologies.
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
• Excellent written and verbal communication skills and business acumen and a commercial outlook.
• A degree in Information Technology, Computer Science or related fields is highly desirable.

Preferred qualifications :

• Strong knowledge of infrastructure, operating system and application vulnerabilities, security architecture, and controls.
• 10+ years of experience with cloud computing concepts and how security controls are applied to those cloud-based technologies.
• Strong ability to successfully interface (verbal and written) with clients in a concise manner while managing expectations at both executive and technical levels.
• Comprehensive understanding of the cyber threat landscape.
• Security related certifications (e.g. CISSP, CISM, GCIH)