Sr Application Security Architect

Clean Harbors hiring for Sr Application Security Architect jobs in North Marshfield, MA, US

The Senior Application Security Architect is responsible for validating that application services are designed and implemented with high security standards. The role is focused significantly on application program interfaces (APIs), and the architect spends a large percentage of time developing and supporting security controls for API services. Additionally, the architect establishes an application security vision with sustainable standards and processes. An influential member of the team, the architect is a primary liaison with the security, engineering and technology teams. 

• Influence secure API development standards and implementations across multiple platforms 
• Adopt security standards for the API lifecycle and disseminate them across development and security teams 
• Enforce rigorous security controls with internal and external constituents, and follow through for verification and consistency 
• Document and provide ongoing maintenance of materials to eliminate discrepancies in development and security best practices. 
• Focus on automation to aid in efficiencies with both testing and production 
• Develop authentication and authorization security requirements to adhere to credential storage, privilege management and authenticity standards; support role- and attribute-based access control 
• Work in tandem with developers to provide repetitive validation testing prior to production that allows for a continuous cycle of development followed by application security assessments 
• Regularly monitor the security community for public-facing security issues as well as to learn new tactics for securing data transmissions and reducing attack exposure 
• Attend and participate in application projects and change management committee meetings. This includes interacting with business units and technical teams to understand what is coming and how projects can be more secure from the beginning 
• Leverage security standards and implementation configurations, as well as common security frameworks 
• Document secure delivery and implementation advancements that meet defined service-level agreements (SLAs) and business metrics 
• Align with architects and development teams for a mission of secure design and data integrity preservation among users, apps and infrastructure 
• Develop security test plans from architectural designs, identify deficiencies and make enhancements to ensure production is not impacted 
• Actively participate in and lead security team meetings that facilitate secure design 
• Be highly engaged in information security projects that evaluate existing security infrastructure and proposed changes as defined by security leadership and architects; deliver projects on time, within budget and in accordance with SLAs