Security Architect

Our Information Security team is seeking a Security Architect to engage on API project efforts in Cloud, On-prem, and Data security architectures. In this role, you will work with Development, Operations, Business, and Enterprise Architecture teams to ensure environments are secured and monitored. The ideal candidate will have a broad technical cloud security background with a focus on security design, detection, prevention, and response to security threats., Secure APIs by implementing access control mechanisms, OAuth, JWT, and configuring API gateway security.

Develop reusable security design patterns to address common cybersecurity challenges.

Craft clear and actionable security standards and policies aligned with industry best practices and regulatory requirements.

Lead the design and innovation of security architectures, integrating advanced technologies to protect against evolving threats.

Collaborate with key stakeholders to align security initiatives with business objectives.

Conduct threat analysis using intelligence and analytics to identify and mitigate potential security risks.

Implement and oversee a risk management framework to protect assets while supporting growth.

Secure machine learning models against adversarial attacks, ensure data privacy in AI training sets, and implement ethical AI principles., The team has a backlog of 2,000+ APIs that need security review, updates, and remediation.

The environment is heavily API-driven, with the majority appearing to be .NET-based.

APIs flow through an API Gateway and include Experience, Process, and System APIs.

The biggest security focus is on Process and System APIs, rather than the generally lower-risk Experience APIs.

This person will spend most of their time reviewing existing API/application architectures, identifying security gaps, and guiding teams through remediation.

Security Architecture + Application Security experience, with the ability to review application/API architectures and identify security gaps.

Deep API Security knowledge, especially authentication, authorization, access controls, API gateways, encryption, token validation, and business logic vulnerabilities.

Hands-on remediation experience: can explain the vulnerability, the risk, and exactly how developers should fix it.

Strong communication skills working directly with developers and Enterprise Architects to challenge designs and guide security improvements., This organization operates within the Financial Services industry. We are seeking a qualified professional to join a team focused on maintaining a secure and robust information technology environment.

Required Skills : Security Architecture + Application Security experience, with the ability to review application/API architectures and identify security gaps. Deep API Security knowledge, especially authentication, authorization, access controls, API gateways, encryption, token validation, and business logic vulnerabilities. Hands-on remediation experience: can explain the vulnerability, the risk, and exactly how developers should fix it. Strong communication skills working directly with developers and Enterprise Architects to challenge designs and guide security improvements., Security Architecture + Application Security experience with the ability to review application/API architectures and identify security gapsDeep API Security knowledge especially authentication Authorization Access Controls API Gateways ENCRYPTION token validation and business logic vulnerabilitiesHands-on remediation experience: can explain the vulnerability the risk and exactly how developers should fix itStrong communication skills working directly with developers and Enterprise Architects to challenge designs and guide security improvements