Application Security Architect

Overview

If you’re looking for a high-energy, inclusive atmosphere and a company that understands the importance of work/life balance, Commonwealth is your match! From generous bonus and 401(k) programs to tuition reimbursement and flexible work schedules, Commonwealth is focused on helping its employees thrive in an environment suited to their needs. On top of all that, the Information Security department offers a hybrid work schedule, so you’ll be able to work from home for part of the week!

 

We’re looking for a application security architect to join our ranks. Are you an experienced candidate with strong security knowledge, technical expertise, and strategic thinking abilities? As a Commonwealth application security architect, you will be a key member of the Information Security Architecture and Engineering teams.

 

Key Responsibilities  

• Reviewing, designing, and leading the integration of security with the software development lifecycle process
• Crafting a comprehensive security strategy that aligns with the organization's objectives and risk appetite
• Collaborating with development and operations teams to integrate security into the entire application development lifecycle through DevSecOps practices
• Leading the design of secure application architectures.
• Ensuring that all applications adhere to relevant security policies and regulatory compliance standards
• Analyzing processes and toolsets used by the developers and database teams to ensure the security of the environment
• Partnering with the application and QA teams to ensure risk is identified, plan and schedule remediations
• Contributing towards secure coding recommendations and develop best practices and guidelines for the development teams
• Assisting with creating security training for the Application, Development, and QA teams

Core Strengths and Skills 

• Deep technical expertise in application development frameworks and lifecycles and the security solutions that support them
• Ability to use threat modeling techniques to uncover possible application security concerns, using it as a communication tool to garner support
• Thorough knowledge of DevSecOps principles and ability to guide integration of security technologies with DevOps technologies
• Strong knowledge of common security flaws (both in design patterns and code)
• Strong experience implementing Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) tools and methodologies
• Experience with web application security penetration testing
• Experience with one of the following programming or scripting languages: .NET, Python, JavaScript, or Node.JS
• Strong communication, consultative, influencing, and presentation skills

Additional Desirable Skills and Knowledge 

• Bachelor’s degree in information systems or related discipline (Or equivalent training)
• 5+ years’ related work experience in an application security role
• Technical expertise inAzure Cloud and Azure DevOps (ADO)
• Understanding the best practices, control frameworks, and applicable existing and new legal/regulatory requirements (SEC S-P Rule, FINRA cybersecurity recommendations, data privacy, and breach notification laws, ISO 27001, NIST CSF and SP 800-53, CIS, CSA CCM, PCI DSS, and others) 
• Security-related certifications such as OSCP, GCIH, CEH, GCIA, GPEN

Have we piqued your curiosity? Can you see yourself thriving in this opportunity? 

 

Picture Yourself Here  

At Commonwealth, we believe in a better world. We hold ourselves and each other to higher standards. We take care of one another. That’s why we invest in you—we encourage employee growth both in your career and education; we are building out a robust diversity, equity, and inclusion program; we offer incredible healthcare benefits; and we find plenty of occasions to celebrate. What’s not to love? 

 

We are always striving to be better, and we are looking for employees who share that same mindset. Better people, better coworkers, better leaders, better creators. Bring your best work and your full self to the table, and we will do the same. Together, we can build a better future for our advisors, their clients, our company, and you. 

  

About Commonwealth  

Commonwealth Financial Network, Member FINRA/SIPC, a Registered Investment Adviser, provides a suite of business solutions that empowers more than 2,000 independent financial advisors nationwide. Privately held since 1979, the firm has headquarters in Waltham, Massachusetts, and San Diego, California.  

  

Tu