Job Description: The Architect is responsible for day-to-day operations of an individual tactical application security unit with team members report directly to this role. Responsibilities also include oversight of activities, artifacts, and product utilization. This person will be the main interface with stakeholders within the individual tactical unit and key in implementing the Application Security program, standards, process, and procedures within that unit.
This individual is also responsible for collaborating scorecards and metrics related to the performance of their tactical unit and for ensuring the integrity of application security control within the software development lifecycle. Oversight responsibilities include all application security operations and providing guidance and direction on application security controls within the specific unit. Additionally, this resource will provide requirements consultation and be responsible for reviewing and approving all requirement, design, and standards proposals.
The Application Security Architect is also responsible for collaborating with peer Architects for the normalization of the Application Security program across the enterprise.
Planning and providing Application Security training for the assigned tactical unit as well as the enterprise is an additional responsibility.
Qualifications: - BS or MS in Computer Science
- Management and Application Security Penetration Testing
- Full understanding of Microsoft Office Products, Windows, Unix, and Linux
- Certified Information Security Professional (CISSP) required
- Certified Ethical Hacker (CEH) or Offensive Security Certified Professional (OSCP)
- Experience with at least one of the following tools required:
- Fortify
- WebInspect
- AppScan
- Fiddler
- Burp
Additional Information: - Duration: 8-month contract
- Hybrid Work Model: Four days onsite required weekly in Pittsburgh
- Rate Range: $45-50/hr. W2 (based on experience)