[SJ-JOB] Application Security Architect, London

---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------


JOB DESCRIPTION
---------------------------------------------------
Position:       Application Security Architect
Location:       London, , United Kingdom
Type:           Permanent F/T

Closing Date:   2008-11-10

Information Security Manager
 
Reference No. SF-325 
Company Global Financial Organisation  
Location London  
Salary Neg  
Package Banking benefits package  
Start Date ASAP  
No. Required 1  

The Role  
Conduct internal and vendor Application security review and SDLC reviews.
Rate risks, produce project plan for on boarding of Application development areas and remediation of issues.
Interacting with Technology teams to provide guidance and enforce group policies and GIS Standards, regulatory requirements and information security best practices. Provide guidance on best application security architecture practices during conceptual design reviews and threat modelling. 
Providing consultancy and hands on assistance to application development teams in the areas of: secure application coding practices including code review. 
Act as an Ambassador and relationship manager on behalf of GIS.

Person Requirements
Degree in engineering, science, business or other numerate discipline. 
Post-graduate degree in computing or business (e.g. MSc, MS in Computer Science or MBA).
Qualified in one or more fields of Information Security desired but not necessary (e.g. CISA, CISSP, GIAC, etc.). 
Certification in one or more operating systems administration and security desired (e.g. MCSE, RHCE/RHCSS, SCSECA/SCSA, etc.)
A demonstrable history of delivering and reviewing Application Security within global organisations.
Prior experiences in utilizing application security scan tools such as AppScan and Fortify or other comparable tools.
Working knowledge of databases such as MSSQl/Oracle/Sybase/MySQL.
Database build security review experience (Oracle/SQL/Sybase) preferred.
Minimum two years of using at least one of the coding languages such as C#, Java, SQL, ASP.net or other scripting languages.
Has the ability to engage extensively with IT teams and departments to understand their technology issues and drivers.
Assist application developers code to secure coding standards, Security patterns, and best practices
Knowledge with best practices for the development of secure software.
Experience working in or with application development teams.
Implementing Risk assessment frameworks, processes, and metrics.
Excellent understanding of relevant and up-to-date technical knowledge of Information Security and Risk products.
Knowledge of Web & Application Layer: .Net Framework, IIS, Apache, TomCat, IBM WebSphere and Web Server Admin

Candidate requirements:
Excellent oral communication and inter-personal skills.
Excellent written communication and presentation skills.
Ability to multi-task.
Ability to think laterally
Ability to deliver innovative solutions to complex problems
Pragmatic security expert with an inherent ability to balance security demands with business reality.
Self starter, highly motivated, ability to work with minimum supervision. 
Must be a good team player and able to work alone or with others.
Experience working in distributed global teams.



JOB REQUIREMENTS
---------------------------------------------------
Please note that in order to apply for any vacancy in the UK, you will need either a valid EC Passport or valid Work Permit enabling you to work in the UK.


CONTACT
---------------------------------------------------
www.informationsecuritysolutions.com/jobs/ref325

Information Security Solutions
Iain Sutherland

[email protected]



---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.

http://www.securityfocus.com/jobs