Application Security & DevSecOps Architect

Medical Mutual•Dublin, OH

1d•Hybrid

About The Position

The Application Security & DevSecOps Architect will lead the design and implementation of secure application architecture and DevSecOps practices across the enterprise, embed security throughout the software development lifecycle (SDLC) to reduce risk, improve resiliency, and enable scalable, secure software delivery and serve as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security.

Requirements

Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.
3 years proven ability to transfer technology to end user applications/environments.
5 years proven ability to transfer technology to end user applications/environments.
7 years proven ability to transfer technology to end user applications/environments.
2 years of experience influencing technical direction in one of the following: application, data bases, or infrastructure.
3 years of experience influencing technical direction in one of the following: application, data bases, or infrastructure.
Expert in one or more technologies (Microsoft, OpenSource, Database (relational, graph, Map, document, etc.).
Basic knowledge in infrastructure and networks with focus on security.
Basic understanding of various project methodology disciplines with basic knowledge of information and systems architectures, highly proficient in website architectures.
Basic understanding of various data base platforms and data warehousing.
Expert in one or more technologies (Microsoft, OpenSource, Databased (relational, graph, Map, Document).
Experience with suite of IT applications including transactional, middleware integration, workflow, web based.
Solid knowledge in infrastructure and networks with a focus on security.
Solid understanding of various project methodology disciplines with solid knowledge of information and systems architectures, highly proficient in website architectures.
Solid understanding of various data base platforms and data warehousing.
Exposure to EA Framework such as FEAC, TOGAF or DODAF.
Expert in one or more technologies (Microsoft, OpenSource, Databased (relational, graph, Map, Document).
Experience with suite of IT applications including transactional, middleware integration, workflow, web based.
Advanced knowledge in infrastructure and networks with a focus on security.
Advanced understanding of various project methodology disciplines with advanced knowledge of information and systems architectures, highly proficient in wesite architectures.
Advanced understanding of various data base platforms and data warehousing.
Exposure to EA Framework such as FEAC, TOGAF or DODAF.

Nice To Haves

Hands-on experience with application security tooling: SAST (Snyk, Wiz, Checkmarx, Veracode, Semgrep, SonarQube) DAST (Qualys, Burp Suite, OWASP ZAP, Invicti) SCA, IaC scanning, container security tools
Strong knowledge of: OWASP Top 10, CWE Top 25 Threat modeling (STRIDE, PASTA, or equivalent) API security and authentication (OAuth2, OIDC, SAML)
Experience with: CI/CD platforms (Azure DevOps, GitHub Actions, Jenkins, GitLab) Cloud security (AWS, Azure) Containers and orchestration (Docker, Kubernetes)
Working knowledge of secure architecture patterns and Zero Trust principles
Professional Certification(s): NA
Professional Certification(s): NA
Professional Certification(s): NA
Experience in cutting edge web collaboration design patterns and best practices

Responsibilities

Acts as a subject matter expert (SME) to assist various IT areas to support efficiencies in overall design for implementations of new technologies and improvement of existing processes.
Advises on best practices and ensures policy and procedure adherence.
Assists in the definition of the current and future state and the transitional plan.
Focuses on the incremental improvements that move toward the future state looking for opportunities to streamline environments and remove redundancy.
Collaborates within teams, participates in reviews of all prospective software and hardware acquisitions.
Evaluates compatibility with current architecture and supports future architecture roadmaps.
Identifies architectural risks and proposes alternatives and solutions.
Documents exceptions to architectural standards.
Assists in the review and revisions of new and existing IT standards and policies evaluating their importance.
Assists in the development of architectural metrics and reports.
Maintains active awareness of IT industry including new developments, emerging trends, development tools and best practices.
Performs other duties as assigned.
Translates overall IT roadmap into actionable processes.
Supports the establishment of targeted architecture and develops standards for the organization covering all key domains (Application, Data, and Infrastructure).
Defines the current and future state and the transitional plan.

Benefits

A Great Place to Work: We will provide the equipment you need for this role, including a laptop, monitors, keyboard, mouse and headset.
Whether you are working remote or in the office, employees have access to on-site fitness centers at many locations, or a gym membership reimbursement when there is no Medical Mutual facility available.
Enjoy the use of weights, cardio machines, locker rooms, classes and more.
On-site cafeteria, serving hot breakfast and lunch, at the Brooklyn, OH headquarters.
Discounts at many places in and around town, just for being a Medical Mutual team member.
The opportunity to earn cash rewards for shopping with our customers.
Business casual attire, including jeans.
Excellent Benefits and Compensation: Employee bonus program.
401(k) with company match up to 4% and an additional company contribution.
Health Savings Account with a company matching contribution.
Excellent medical, dental, vision, life and disability insurance — insurance is what we do best, and we make affordable coverage for our team a priority.
Access to an Employee Assistance Program, which includes professional counseling, personal and professional coaching, self-help resources and assistance with work/life benefits.
Company holidays and up to 16 PTO days during the first year of employment with options to carry over unused PTO time.
After 120 days of service, parental leave for eligible employees who become parents through maternity, paternity or adoption.
An Investment in You: Career development programs and classes.
Mentoring and coaching to help you advance in your career.
Tuition reimbursement up to $5,250 per year, the IRS maximum.
Diverse, inclusive and welcoming culture with Business Resource Groups.