Job Description
AllSTEM Connections is hiring for one of our prestigious clients. Please make a note of the details below and Kindly let me know if you would like to pursue this opportunity further
\n
\n
Role - Information Security Architect
\n
Pay Rate – $80 -$90
\n
Location – Hybrid Schedule/Dallas,TX
\n
Contract for 1 year
\n
\n
Other notes - IAM protocols, encryption and hashing techniques and prior software engineering experience is required.
\n
\n
\n
Job Summary
\n
\n
Position Summary:
\n
As a Senior Lead Engineer, Application Security Architecture ayou will play a meaningful role in maintaining the controls that enable our organization to operate efficiently, cost effectively, and within compliance standards. Engineers will also assist others in interpreting, understanding, and applying the information security policies and standards to mitigate information security risks. This position works closely with other members of the Information Security and the Legal Compliance organizations, in a coordinated and focused manner. Specifically, you will be responsible to:
\n
\n
• Develop advanced security solutions to meet the requirements of key stakeholders to ensure that solutions are secure, scalable, available, resilient, technically proficient, performance efficient, and fit into overall Hilton’s architecture models.
\n
• Create and maintain security architecture strategies, patterns, standards, and guidelines which balance business priorities, information security risks, emerging threats, and best practice security application architecture to ensure the confidentiality, integrity, and availability of Hilton information assets.
\n
• Continuously evaluate the organization’s existing application security practices, help define and measure security-related activities, and demonstrate concrete improvements to the application assurance program within the organization.
\n
• Lead the evaluations of technologies and software products to determine the feasibility and desirability of incorporating their capabilities within the Hilton product suite.
\n
• Guide and contribute extensively to the ongoing collection, development, review and adoption of architecture and development standards and best practices.
\n
• Actively participate in the governance process associated with application security and technology standards.
\n
• Use coding languages or scripting methodologies to solve a problem with a custom workflow.
\n
\n
Qualifications
\n
Please list specific qualifications/experience, knowledge, skills and abilities needed for this position.
\n
• Working knowledge of one or more following technologies: Atlassian Stack, Node.js, react, relay, Graphql and NOSQL database such Couchbase.
\n
• Experience with AWS Cloud environment and cloud security concepts and architecture.
\n
• Experience reviewing application design, software framework, and infrastructure to identify issues. Capable of assessing underlying components (e.g., databases, servers), configuration, and security access controls.
\n
• Experience with static code scan tools (e.g., Fortify, Checkmarx) and dynamic scanning tools (e.g., Burp, Qualys).
\n
• Experience with development CI/CD tools such as Git, Jira, GitLab, or Jenkins.
\n
• Familiarity with container orchestration services, especially Kubernetes.
\n
• At least three years experience and proficient in a one of the public clouds such as AWS, Azure, GCP or Alicloud.
\n
• Experience developing and authoring application security architectures, standards, and guidelines.
\n
• Experience communicating application security requirements and risk to IT teams and business partners.
\n
• Experience reviewing application design, software framework, and infrastructure to identify risks. Capable of assessing underlying components (e.g., databases, servers), configuration, and security access controls.
\n
• Experience with DevSecOps and integrating security tools into a secure CI/CD pipeline.
\n
\n
Required Qualifications
\n
\n
• Minimum Education: BA/BS in Information Technology, Computer Science, Computer Engineering, or equivalent work experience.
\n
• Minimum Years of Experience: 5+ years of experience combined with exposure to product development and web development on J2EE platforms or alternate technology stacks.
\n
• Minimum 3 years of experience working with AWS Cloud technologies or alternate public cloud providers.
\n
• Minimum Years of Experience: 3+ year of product development and web development on J2EE platforms or alternate technology stacks.
\n