Aperia

Sr. Cybersecurity Architect - Threat Modeling - SDLC SME (X2) The SME should have extensive threat modeling experience and experience implementing a mature end-to-end SDLC process which incorporates best practices around application security. SME should be very knowledgeable with the process that produces software with the highest quality and lowest cost in the shortest time possible. SME should help facilitate a well-structured flow of phases that will help BOTW quickly produce high-quality software which is well-tested and ready for production use. SME will work with DevOps, development teams, Application Security and other stakeholders to analyze our entire SDLC process and ensure BOTW has implemented a robust SDLC process with the proper signoffs and toll gates. The SME should have 7 to 10 years’ experience. RequirementsELIGIBILITY REQUIREMENTS <li> Must be willing to submit to a background investigation and drug test as part of the selection </li> process This job description is not intended to be all-inclusive. An employee may also perform other reasonable related business duties as assigned by their immediate supervisor or management. Principals only. Recruiters please don't contact this job poster. DO NOT contact us with unsolicited services or offers.Benefits

Dallas

Sr. Cybersecurity Architect - Threat Modeling - SDLC SME (X2)

Arctic Wolf Networks

Ready to make an impact? Arctic Wolf is looking for an Application Security Architect to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.
How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.
In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
Position Overview and Objective
The Lead Application Security Architect role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.
Primary Responsibilities and Duties
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices. Mentor team members.</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
Key Skills
Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research
Key Competencies
Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.
Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.
Can be counted on to exceed goals successfully; is constantly and consistently one of the top performers; very bottom-line oriented; steadfastly pushes self and others for results.
Minimum Qualifications
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>10+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Significant experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
Preferred Qualifications
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Expert level analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Significant Experience in one or more highly regulated environments (FedRAMP, SOX, ISO 27001, etc) or frameworks</li>
<li>Presentation of a security topic and an industry conference</li>
<li>One a more Industry Certifications – (CISSP, CCSP, CSLP, OSCP, OSWE, GPEN, GWAPT, CEH, etc)</li>
</ul>
Travel Requirements
Typically 10% or less of business travel
Security Requirements:
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
About us:
At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.
Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Provo

Principal Application Security Architect

Ready to make an impact? Arctic Wolf is looking for a Lead Application Security Engineer to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.
How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.
In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
Position Overview and Objective
The Lead Application Security Engineer role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.
Primary Responsibilities and Duties
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
Key Skills
Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research
Key Competencies
<ul>
<li>Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.</li>
<li>Uses rigorous logic and methods to solve difficult problems with effective solutions; probes all fruitful sources for answers; can see hidden problems; is excellent at honest analysis; looks beyond the obvious and doesn't stop at the first answers.</li>
<li>Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.</li>
</ul>
Minimum Qualifications
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>7+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
Preferred Qualifications
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Experience working in a regulated environments (SOX, ISO 27001, etc)</li>
</ul>
Security Requirements:
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
About us:
At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.
Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Lead Application Security Engineer

Ivanti

Senior Application Security Engineer
Who We Are
Ivanti is a global leader in IT systems and security management, service management, asset management, and mobility management and security solutions - helping organizations reduce risks and costs associated with managing their IT environment.
Ivanti is experiencing significant growth worldwide. The company has received numerous awards for being a Top Place to Work, as well as many accolades for the products it develops. Our customer focus strategy is driven by the company’s core values, including innovation, accountability, teamwork, and trust, it's an exciting time to join Ivanti.
Looking for more than just a job? We like developing our people just as much as we like developing great products and services
If you’re passionate about what you do, are a champion of customer satisfaction and success, and interested in developing solutions that make a difference and in having fun while doing it, Ivanti is the place for you!
What We Do
<ul>
<li>Empower users to seamlessly and securely connect from any place in the world that offers air, water and… Internet!</li>
<li>Equip organizations with the right tools to configure access, manage and enforce compliance with a holistic view on network, users and usage.</li>
<li>Empower organizations to continue to breathe easy, now with an added sense of invincibility.</li>
<li>Work hard so that you can focus on the things you want to!</li>
</ul>
What we are looking for:
A Senior Security Engineer to work with developers to refine security checkpoints in the development cycle that are based industry accepted security standards and represent Security platform within the various stages of SDLC.
What you will be doing:
<ul>
<li>Develop a broad and deep technical understanding of products, services and architectures.</li>
<li>Leverage this understanding to conduct architecture reviews, threat modelling and code reviews on web applications, mobile applications and other relevant services.</li>
<li>Interpret security tools and penetration testing results to stakeholders, providing advice on vulnerability remediation and risk mitigation.</li>
<li>Create relevant documentation and metrics to your stakeholders and business leaders and deliver these in a clear, concise manner.</li>
<li>Research and maintain proficiency in attacker Tools, Techniques, Procedures and other security topics.</li>
<li>Propose and develop training materials to help raise the security bar across the organization.</li>
<li>Develop innovative and scalable tools, solutions, and processes to enhance product security operations</li>
</ul>
Who you are
<ul>
<li>Innate curiosity and ability to learn. Individuals should be confident in picking up new technologies and pivoting when the role requires, given the fast-paced agile development environment we support.</li>
<li>Critical thinking and troubleshooting are paramount. Practical, creative solutions to difficult problems are key.</li>
<li>Passion for security. We’re looking for people who genuinely care about working to create a secure product with modern, agile facing practices.</li>
</ul>

You are the ideal candidate if you have
<ul>
<li>B.S. Computer Science or similar combination of education and experience</li>
<li>Deep software development experience (Java, iOS and Android APIs, Web, Python)</li>
<li>Good communication skills</li>
<li>Have an excellent working knowledge and ability to educate others on common vulnerability types, including SQL/command injection, XSS, CSRF, and SSRF</li>
<li>Have experience in web, database, information and/or infrastructure security</li>
<li>Know and love learning about the latest security tools, infrastructure, and industry best practices</li>
<li>Enjoy working across and being a resource for other engineers and sharing your knowledge of secure coding practices</li>
<li>Experience in authentication and authorization: SAML, OAuth, LDAP, AD, etc</li>
<li>Sound understanding of app security vulnerabilities, defense techniques and security best practices, including language-specific security measures and present-day threats</li>
<li>Deep security subject matter expertise in at least one major public cloud provider (AWS, GCP, Azure)</li>
<li>Experience with deploying and securing SaaS applications and cloud environments at scale</li>
<li>Working experience with CI/CD pipeline, containerization (Kubernetes, Docker, etc) and MicroServices</li>
<li>Coordinating bug bounty (VRP) programs and assisting with remediation</li>
</ul>
Organizational Culture
Ivanti provides a supportive environment for motivated individuals looking to grow their careers and realize high earnings potential. Join a challenging, technology focused environment, earn a competitive salary and benefits package, receive the training you need to stay ahead of the curve, and work in a casual, smart, and fast-paced organization.
External Recruiting Agencies/Vendors: Ivanti does not currently engage with external recruiting agencies and will not accept unsolicited resumes from any external agency. Unsolicited resumes submitted by agencies to Ivanti will become the property of Ivanti and may be contacted and engaged with directly. Ivanti maintains a preferred vendor list and only engages with these agencies from time to time. Ivanti has not agreed to pay placement or any other fee to companies who have not been specifically retained to conduct a candidate search.

#LI-JM1
#LI-REMOTE

United States

Senior Application Security Engineer

Qvest

Who We Are<a href="http://www.qvest.us" rel="noopener noreferrer nofollow ugc" target="_blank">Qvest.US</a> provides business and technology consulting services that bring our clients closer to their customers, data, and content. We have a global footprint across five continents and are the largest Media and Entertainment focused consulting company in the world. We have deep expertise across Program Management, Digital Media Supply Chain, IP &amp; Rights Management, Data &amp; Analytics, AI/ML, Customer Experience and Salesforce, Cybersecurity, &amp; IP Transformation.Who we're seekingYou are an organized and industrious leader who will motivate teams and help drive growth of Qvest's Cyber Security practice. You seek to join a team where you have the tools to accelerate your career, and leverage your expertise in Cyber Security to build relationships and drive growth.
<h3>What you'll do</h3>
<ul>
<li>Help lead project teams focused on Cyber Security through all core project phases, including project setup, requirements gathering, design, development, testing and deployment.</li><li>Perform tasks, create strategies, and execute plans that improve the security of client content, data, and customers.</li><li>Conduct initial reviews of deliverables and give feedback.</li><li>Proactively identify risks and issues, and provide mitigation strategies.</li><li>Lead various client meetings such as stakeholder interviews and client workshops.</li><li>Contribute to internal growth initiatives including mentorship, recruitment, strategy and/or methodology enhancement.</li></ul>
<h3>What you'll bring</h3>
<ul>
<li>3-7+ years System Implementation, SDLC, Integration, and Project Management experience</li><li>1-3 Years Experience in any Cyber Security Domains </li><li> - Identity &amp; Access Management</li><li> - Security, strategy and risk</li><li> - Cyber Defense</li><li> - Threat detection &amp; response</li><li> - Security Engineering</li><li> - Data classification &amp; privacy</li><li> - Application Security</li><li> - Security Orchestration &amp; Automation</li><li> - Endpoint protection</li><li> - Infrastructure Security</li><li>Experience in teams through client-facing activities such as requirements gathering, stakeholder workshops, and deliverable review/approval sessions</li><li>Experience in project planning, including building and managing to project plans, budgeting, resource allocation, and reporting status to clients and internal teams</li><li>Trained on process and/or technology methodologies (e.g. Lean Process Improvement, Six Sigma, Agile implementation, Waterfall model)</li><li>Bachelor's degree in engineering, information systems, computer science, business administration, or other related fields</li></ul>
<h3>Preferred Experience</h3>
<ul>
<li>CISSP and/or CISA Certified</li><li>GIAC Certified</li><li>Experience in Media &amp; Entertainment and/or Consumer Products industries</li><li>Experience at a large consulting firm (e.g., Accenture, Deloitte, EY, CapGemini, PWC)</li></ul>Life at QvestWe were founded on a culture of collaboration and inclusiveness, and this permeates each of our initiatives, both client-facing and internal. We offer a wide selection of benefits including medical, dental &amp; vision, 401k matching and flexible vacation; we sponsor training to advance our teams’ skill sets and we prioritize our employees’ professional growth paths. <a href="http://Qvest.US" rel="noopener noreferrer nofollow ugc" target="_blank">Qvest.US</a> is currently 350+ people strong and we’ve been recognized as a “Best Place to Work,” a “Great Place to Work,” “Fastest Growing,” and “A Jewel."Equal Employment OpportunityQvest is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Qvest applies this stance to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including internships, at all levels of employment.

Los Angeles

Cyber Security Consultant

Apply to SDLC Cyber Security Jobs in companies remotely and near you. New SDLC Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr. Cybersecurity Architect - Threat Modeling - SDLC SME (X2) at Aperia	Remote Full Time Application Security Devops SDLC
Principal Application Security Architect at Arctic Wolf Networks	Remote Full Time Red Team CCSP Application Security
Lead Application Security Engineer at Arctic Wolf Networks	Remote Full Time Red Team Application Security AWS
Senior Application Security Engineer at Ivanti	Remote Full Time Application Security Agile Android
Cyber Security Consultant at Qvest	Full Time Consultant Internship Consulting Application Security

SDLC Cyber Security Jobs

0 SDLC Cyber Security Jobs. Page 1 of 1

5 closed sdlc cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

SDLC Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

SDLC Cyber Security Jobs

0 SDLC Cyber Security Jobs. Page 1 of 1

5 closed sdlc cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

SDLC Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter