Application Security Architect (freelancer)

Key Responsibilities

• Work with various stakeholders across the organization to ensure security of applications throughout their lifecycle considering industry best practices, regulatory requirements, and organizational needs
• Steer external partner on conducting comprehensive security assessments of applications, identifying vulnerabilities and recommending appropriate remediation strategies
• Collaborate with development teams to integrate security controls and measures into the application development process effectively
• Define and enforce application security policies, standards, and procedures, ensuring compliance with internal and external security requirements
• Stay up to date with emerging security threats, vulnerabilities, and industry trends related to application security and assess their potential impact on the company
• Provide guidance and support to development teams on secure coding practices, secure configuration management, and vulnerability remediation
• Act as a subject matter expert and provide guidance on application security to stakeholders, management, and executives
• Any other Security Architecture topic relevant to project deliverables
• Stay abreast of industry standards and frameworks such as OWASP, SANS, and NIST, and incorporate relevant practices into the application security program
• Develop and maintain strong relationships with key vendors and strategic external partners

Minimum Requirements

• University degree or equivalent experience in computer science, engineering, information technology or other relevant field(s)
• Fluent in written and spoken English
• Proven experience working as an Application Security Architect or in a similar role, with a focus on securing applications
• Strong knowledge of application security principles, including secure coding practices, input validation, authentication, access controls, and encryption
• Experience with application security standards and frameworks, such as OWASP Top Ten, SANS CWE Top 25, and secure software development lifecycle (SDLC) methodologies
• Hands-on experience with security testing techniques ideally including code review, vulnerability scanning, and penetration testing
• Experience working in a global company and designing / deploying solutions at scale
• Excellent negotiation, communication, and interpersonal skills, ability to develop influential relationships with different stakeholders across all levels

Preferred Requirements:

• Knowledge and experience of industry standards such as ISO 27001, CIS Controls, NIST, Cyber Essentials is a plus
• Certification or accreditation in Information Security (CSSLP, CISM, CISA, CISSP, etc.,) and/or relevant vendor specific certifications is a plus