Information Security Principal Lead

Role & responsibilities

• Provide application security architecture support to the teams that build and maintain business systems.
• Manage and maintain a library of application security architecture patterns
• Conduct comprehensive security architecture assessments for applications, systems, and infrastructure
• Implement secure-by-design principles in solution architecture and development processes.

Preferred candidate profile

• Proven experience in security architecture assessments and secure-by-design implementations.
• Experience with enterprise security frameworks and methodologies.
• Deep understanding of security architecture principles and frameworks
• Lead application threat modeling (STRIDE/PASTA) for new features, APIs, and microservices, mapping findings to OWASP Top 10 and OWASP ASVS controls.