Search for Application Security Architect positions in New Jersey or Charlotte, NC, focusing on roles requiring 15+ years of experience, specifically in DevSecOps, with strong knowledge of CI/CD tools and cloud platforms.

Okay, I've searched for Application Security Architect positions in New Jersey or Charlotte, NC, requiring 15+ years of experience, with a focus on DevSecOps, CI/CD tools, and cloud platforms. I have found 42 positions for you.

Application Security Architect

New Jersey, United States

Charlotte, NC

15 years + Experience

DevSecOps

CI/CD Tools

Cloud Platforms

Can you help me to analyze the job description and company culture?

Sure. Here's the analysis:

Job Analysis:

The Application Security Architect role at TalentOla fundamentally aims to embed security practices into the software development lifecycle by modernizing CI/CD pipelines and automating security controls. This entails working extensively with development, operations, and security teams to assess existing processes and implement best practices. A successful candidate would need to navigate the complexities of integrating security solutions within existing workflows, which requires a strong understanding of both technical aspects and compliance regulations. Core responsibilities include evaluating current security measures, implementing automated checks, and ensuring adherence to secure coding practices. The interdisciplinary nature of this role suggests that the ideal candidate must excel at collaboration while also possessing deep expertise in security frameworks, CI/CD tools, and cloud technologies. Success in this position will be measured by the candidate's ability to enhance the security posture of development systems while accelerating the delivery speed without compromising overall integrity.

Company Analysis:

TalentOla operates in a rapidly evolving recruitment technology landscape, characterized by its commitment to diversity and its innovative, AI-led recruitment solutions. This positioning as an advanced search firm allows for the establishment of a modern, agile workplace culture focused on efficiency and technological integration. With its mission to support local initiatives and enhance workforce diversity, TalentOla likely values collaboration, social responsibility, and forward-thinking approaches among its team members. The Application Security Architect role is crucial within this context, as it not only ensures the integrity and security of the software development lifecycle but also reflects the company’s commitment to fostering a secure and innovative environment. This role is likely to involve collaboration across teams, emphasizing the need for excellent communication skills within a potentially fast-paced and dynamic organizational structure. Additionally, a strong alignment with the organization’s values regarding technology and diversity will be essential for long-term success.

Mock up some interview questions based on the job description.

Absolutely. Here are some mock interview questions that could come up:

Tell me about a time when you had to integrate security practices into an existing development workflow. What challenges did you face?
Describe a situation where you successfully automated a process in a CI/CD pipeline. What tools did you use?
Can you provide an example of how you've collaborated with cross-functional teams to implement security controls?
How have you ensured compliance with security standards in your past roles?
What steps would you take to assess the security of a CI/CD pipeline that is currently manual?
How do you approach the task of modernizing existing security practices in an organization?
What are some best practices for secure coding that you have implemented in your previous projects?
Imagine you are faced with a security breach that affects the development lifecycle. How would you handle it?
Given the rapid changes in technology, how would you stay updated with emerging security threats and practices?
Why are you interested in working at TalentOla specifically?
How do you think your experience aligns with our mission to increase workforce diversity?
What unique perspective do you bring to this role that would help us enhance our security measures?
Tell us about a time you had to resolve a conflict among team members while working on a project. How did you manage it?
If given the opportunity, what innovations would you propose for improving our security protocols in DevSecOps?
What questions do you have about the team you will be working with if you are selected for this role?

Job Details

Overview Company

Application Security Architect

TalentOla

2 days ago

Highlight

OnsiteFull-time15+ yearsDirector

Summary

TalentOla is seeking an Application Security Architect with strong DevSecOps expertise to join their team in New Jersey, United States. The role involves assessing and modernizing CI/CD pipelines and embedding security controls and automation into the software development lifecycle.

About the Role

As an Application Security Architect with strong DevSecOps, you will be responsible for assessing the architecture, controls, processes, and deployments of secure CI/CD pipelines. You will collaborate with development, operations, and security teams to understand security best practices and compliance standards. Your role includes reviewing secure coding practices, evaluating options for automating security checks, and strategizing plans to modernize pipelines and remove manual processes.

About You

Required:

Proven hands-on experience in designing and securing DevOps pipelines and security engineering roles.
Expertise in cloud technologies, automation tools, security controls, and a strong understanding of security frameworks and compliance standards.
Proven experience working with development, operations, and security teams to integrate security practices into the development lifecycle.
Strong understanding of CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions, Azure DevOps).
Working knowledge in branching strategy and development lifecycle management.
Expertise in containerization and orchestration (e.g., Docker, Kubernetes).
Proficiency in infrastructure as code (IaC) tools (e.g., Terraform, Ansible, CloudFormation).
Deep knowledge of security tools and practices (e.g., SAST, DAST, SCA, secrets management).
Experience with cloud platforms (AWS, Azure, GCP) and their security services.
Strong understanding on secure development lifecycle framework, secure code practice and OWASP Top10 vulnerabilities and remediation.
Good knowledge of scripting skills (e.g., Python, Bash, PowerShell).
Familiarity with compliance frameworks (e.g., NIST, ISO 27001, SOC 2).

Preferred:

Certifications: CISSP, CCSP, or equivalent.
Azure, AWS or GCP certification (Security and DevOps).

TalentOla

TalentOla is a search firm focused on meeting our customers’ diversified talent needs across industry verticals and functions. We have expertise in supporting clients’ deep technical and techno commercial expertise. We have a one-of-a-kind AI led search and delivery model that uses technologies across the entire recruitment life cycle. Our processes provide our experienced recruiters with the actionable intelligence needed to understand customers' real needs and find the best talent across the globe extremely fast.

TalentOla is a journey embarked on by a group of senior talent professionals and is mentored by the industry veterans with a mission to increase workforce diversity. TalentOla is committed to supporting local initiatives by partnering with organizations that share our values, both in cash and kind