SECURITY ARCHITECT

Job Description

• Develop proof-of-concept prototypes for promising cybersecurity solutions, ensuring alignment with existing security architecture and strategic goals.
• Identify and assess innovative cybersecurity tools, companies, and concepts that can enhance security architecture.
• Work closely with internal stakeholders, including the Cybersecurity Product Development team, to transition prototypes into fully operational products and solutions.
• Continuously monitor and analyze emerging cybersecurity trends, technologies, and practices that have the potential to impact security posture.
• Build automation to Integrate and orchestrate existing security tools so we can quickly resolve damaging malware infections.
• Independently formulate direction, design or oversight for the development of major Enterprise-wide programs or plans that have significant impact on the success of the organization
• Be responsible for overall planning, direction and oversight of multiple projects, products, services or functions.
• Stay up to date on new security tools & techniques in the information security space.
• Conduct proof of concept activities with key business users in support of advanced use cases.
• Automate security tools and processes ensuring innovation and advancement strategies that keep pace in the areas of access control, security-in-depth, secure transaction processing, secure coding practices for web and mobile applications.
• Be a product security champion by driving Security Architecture and Design/implementation/optimization for Web, API and Mobile backend applications.
• Engage in the initial requirements definition (including analysis of threats and risks and alignment with security, Engineering, IT and Architecture standards).
• Conduct and facilitate security reviews, threat modelling including deep design reviews throughout the development lifecycle.
• You’ll be working on enabling/building security on various platforms and technologies which protect the applications from attacks like:
o Payment processing platforms, Payment Wallet solutions, Consumer facing applications, COTS products deployed in house, public clouds, Issuer/Acquirer facing platforms and applications, white labelled solutions for partners.
o zTPF, zOS, MVS, Linux, Windows, VMWare, Openstack, SDN, Public cloud like AWS, Google
o Cybersecurity tools like IDS, SIEM, Tripwire, Tanium, Netwitness, Netflow, WAF
o HSMs, Tokenization systems, data encryption solutions from Safenet, Vormetric etc
o Web technologies like HTTP, SOAP, REST services, AJAX
o Databases like Oracle, MS SQL, Couchbase, Cassandra, Riak, Aerospike
o Programming languages like Java, C, C++, .Net, Javascript, GoLang, ErLang, Cobol etc
o Caching services like Kafka, Coherence, MQ
o Big-data like Hadoop
o Web Access Management solutions like Forgerock, Siteminder, Custom/in-house Security Frameworks