101 applicantsPosted by Agency

Company

Ramp Talent · 1 day ago

Security Architect

United States

Full-time

Remote

Senior Level

$180K/yr - $210K/yr

5+ years exp

Maximize your interview chances

Information TechnologyInternet

Hiring Manager

Ben Martinez

Insider Connection @Ramp Talent

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Provide security architectural review of development projects throughout the SDLC on a rapid cycle including specifying minimum security requirements.

Provide security reviews and recommendations for SAAS and desktop applications (Mac and Windows) for the Filevine product.

Provide security review and recommendations on various subsystems, such as email and calendaring plugins across various operating systems and browsers.

Experience with helping enhance the security on new Filevine products including the secure use of Ai tooling and their implementation.

Improve monitoring capabilities for cloud environments to improve detection of security issues.

Strategize and outline goals and objectives to secure the cloud environments and cloud applications while enhancing the application security program.

Investigate security incidents.

Install security measures and operate software/hardware to protect systems and information infrastructure, including network and web firewalls, and data encryption programs.

Document and research best practice architecture designs as part of an overall risk management strategy.

Work with internal teams to perform tests and uncover network vulnerabilities.

Help remediate detected vulnerabilities to maintain a high-security standard.

Stay current on cloud security standards, trends and news.

Develop company-wide best practices for cloud security.

Research security enhancements and make recommendations to management.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Information SecurityNetwork SecurityCloud SecuritySIEM TechnologiesThreat HuntingSOAR PlatformsCloud HardeningPenetration TestingAWSGCPHerokuAzureContainer SecuritySecurity EngineeringIncident ResponseOrchestration ToolsObservability ToolsCISSP CertificationAWS Certified Cloud PractitionerAWS Certified DeveloperAWS Certified DevOps EngineerCertified Cloud ArchitectCertified Cloud ProfessionalCertificate of Cloud Security KnowledgeCompTIA Cloud+CompTIA Cloud Essentials+Google Associate Cloud EngineerGoogle Professional Cloud ArchitectMicrosoft Certified Azure FundamentalsMicrosoft Azure Administrator Associate

Required

5+ years combined in information technology/security with emphasis on network security. A BS/MS degree in a technical field such as information security or computer science can be considered as supplementary experience.

Strategize and outline goals and objectives to secure Cloud environments and Cloud applications while building the application security program.

Ensure Filevine is following cloud security best practices for cloud environments. Ensure appropriate cloud logging, monitoring and response efforts are in place to protect Filevine and our customers. Excellent history in advising and executing security architecture design and assessments.

Great degree of familiarity with designing and implementing secure Enterprise cloud networks.

Significant experience with SIEM and logging technologies.

Knowledgeable with Threat Hunting practices.

Expert knowledge with SOAR platforms and creating run books / play books.

Experience with cloud hardening best practices.

Experience with both executing and defending network penetration tests.

Security Architectural Experience with two (AWS, GCP, Heroku and/or Azure) cloud infrastructure platforms.

Experience with container security for Windows & Linux operating systems. Working knowledge of security requirements for SOC 2 Type I & II, HIPAA, GDPR, CCPA and CJIS. Significant experience with security engineering, incident response and security operations best practice.

Significant experience with orchestration and observability tools.

Strong Project Management experience.

A strong curiosity, initiative, persistence, and willingness to experiment to provide solutions to diverse technical challenges.

Experience with scripting and development languages (e.g., JavaScript, Python, Java, C++). Automation skills are a plus.

Strong team player and work ethic are essential.