Application Security Architect - SA5 Internet & Ecommerce - Minneapolis, MN at Geebo

Application Security Architect - SA5

Company Name:
Wells Fargo
The Systems Architect will provide expertise on securing business software and data with application security controls including design assessment and threat model techniques and tools. Understand and stay current on emerging security threats. Recommend and design mitigating controls that help project teams meet business objectives and regulatory requirements. Conduct comprehensive security assessments of emerging application security technologies, solutions, and products.
Basic
Qualifications: 7
years design and planning experience in systems, applications or IT Architecture.
Minimum
Qualifications: Demonstrated ability to influence management on technical or business solutions. Demonstrated wide application of technical principles, practices, and procedures to multiple applications or a component family.
Demonstrated technical expertise and comprehensive knowledge of an entire line of business or infrastructure sub-domain.
5
years experience in information security.
5
years experience securing J2EE and/or .Net based applications.
3
years experience securing relational databases.
Demonstrated experience and expertise in the application security domain.
Demonstrated experience creating and documenting system architectures or designs.
Team player with strong analytical, consulting, and communication skills.
Preferred Skills:
Certified Secure Software Lifecycle Professional (CSSLP) or equivalent professional certification
Demonstrated experience in threat model techniques such as abuse cases and attack trees.
Understanding of secure software development lifecycles (S-SDLC) such as Microsoft SDL.
Understanding of at least one common software development methodology such as Agile.
Understanding of standard application threat taxonomies such as STRIDE and DREAD.
Understanding of service oriented architecture (SOA) and security risks specific to SOAP and REST web services.
Understanding of database security issues spanning relational, object oriented, NoSQL, and Big Data platforms.
Experience with at least one web application firewall such as F5 ASM or Imperva SecureSphere.
Experience with at least one SOA gateway product such as IBM DataPower or CA Layer7.
Experience with a threat modeling tool such as Microsoft TA&M.;
Experience with an Integrated Development Environment (IDE) tool such as IBM Eclipse or Microsoft Visual Studio.
Understanding of or experience with Unified Modeling Language (UML) and CASE tools.
Understanding of or experience with database access monitor (DAM) products.
Knowledge of information security vulnerabilities, threats, exposures, as well as associated risk and mitigating solutions.
Experience working across company lines to partner with vendors, industry consortia, standards bodies, and associations.
Demonstrated experience in producing consumable reports or presentations for technical and leadership audiences.
How to Express Interest in This Job: Wells Fargo invites you to apply for this job at .
Relevant military experience is considered for veterans and transitioning service men and women
Wells Fargo is an Affirmative Action and Equal Opportunity Employer, Minority/Female/Disabled/Veteran
Job Posting Title: Application Security Architect - SA5
Requisition Number: 5018001
Executive Org Description: TECH & OPS/TECHNOLOGY AND OPERATIONS
Schedule Type: Regular
Scheduled Hours: 40
State: CA
City: San Francisco
Zip Code: 94105
Job Contact Company: Wells Fargo
UniqueIdentifier: 5018001CASAN FRANCISCO94105Estimated Salary: $20 to $28 per hour based on qualifications.

Don't Be a Victim of Fraud

  • Electronic Scams
  • Home-based jobs
  • Fake Rentals
  • Bad Buyers
  • Non-Existent Merchandise
  • Secondhand Items
  • More...

Don't Be Fooled

The fraudster will send a check to the victim who has accepted a job. The check can be for multiple reasons such as signing bonus, supplies, etc. The victim will be instructed to deposit the check and use the money for any of these reasons and then instructed to send the remaining funds to the fraudster. The check will bounce and the victim is left responsible.