SecDesign Security Architect for New York, NY - Onsite

Hi,

My name is Rohit Chauhan, and I am a Staffing Specialist at Novia Infotech LLC. I am reaching out to you on an exciting job opportunity with one of our clients.

 

Job Title: SecDesign Security Architect

Location: New York, NY - Onsite

Interview Process: Face-to-Face Interview Required

Position Overview

We are seeking an experienced SecDesign Security Architect to join our Enterprise Security Architecture team. The ideal candidate will be responsible for conducting comprehensive security architecture assessments across applications, infrastructure, cloud platforms, business processes, and enterprise technology ecosystems.

This role serves as a trusted security advisor and internal consultant, partnering with technology teams, business stakeholders, architects, developers, risk management groups, and executive leadership to identify security risks, evaluate controls, and recommend remediation strategies aligned with industry best practices and enterprise security standards.

The successful candidate will possess deep expertise in application security, cloud security, network security, secure architecture design, risk assessments, governance, and SDLC modernization initiatives.

---

Key Responsibilities

Security Architecture Assessments

• Lead SecDesign security assessment workshops and architecture review sessions with business and technology stakeholders.
• Conduct detailed security reviews of applications, platforms, infrastructure, cloud environments, and business processes.
• Identify, analyze, prioritize, and communicate security risks based on business impact and technical exposure.
• Develop actionable remediation recommendations aligned with enterprise security policies and industry frameworks.
• Evaluate architecture diagrams, technical designs, system integrations, and functional requirements for security implications.

Application Security

• Assess authentication, authorization, access control, and auditing mechanisms.
• Review application security controls including session management, input validation, encryption, and secure coding practices.
• Analyze penetration testing findings and vulnerability assessment reports.
• Support threat modeling and secure design reviews throughout the SDLC.
• Provide developer-friendly security guidance and best practices.

Cloud & Platform Security

• Evaluate cloud security architectures across public, private, and hybrid cloud environments.
• Review cloud-native security controls, IAM strategies, encryption models, and monitoring capabilities.
• Recommend secure cloud architecture patterns and security design standards.
• Assess SaaS, PaaS, and enterprise platform security implementations.
• Support deployment automation and secure cloud adoption initiatives.

Network & Infrastructure Security

• Assess network security architecture, segmentation, firewalls, secure communications, and connectivity models.
• Review infrastructure security controls and enterprise security configurations.
• Evaluate security risks associated with enterprise integrations and third-party solutions.
• Recommend improvements to enhance overall security posture and resilience.

Architecture Governance & Standards

• Develop, maintain, and enhance security reference architectures, blueprints, standards, and patterns.
• Participate in Operational Risk, Technology Risk, and Information Security governance forums.
• Contribute to enterprise architecture reviews and strategic security initiatives.
• Ensure alignment with organizational security policies and risk management objectives.

SDLC Modernization & Technology Enablement

• Collaborate with global SMEs to modernize secure software development lifecycle (SDLC) platforms.
• Support DevSecOps initiatives and deployment automation strategies.
• Influence secure development and deployment practices across diverse technology stacks.
• Identify opportunities for security innovation and strategic technology investments.

Stakeholder Management & Communication

• Present security findings, recommendations, and risk assessments to technical and executive audiences.
• Translate complex technical security risks into business-focused recommendations.
• Build strong partnerships with development teams, architects, risk managers, and business leaders.
• Drive stakeholder engagement and secure buy-in for remediation activities.

---

Required Qualifications

• 8+ years of experience in Information Security, Cybersecurity, Security Architecture, IT Risk, or Security Consulting.
• Extensive experience conducting security architecture assessments, audits, and risk evaluations.
• Strong understanding of application, network, platform, and cloud security principles.
• Experience reviewing architecture diagrams, technical designs, and enterprise application landscapes.
• Strong knowledge of secure software development lifecycle (SDLC) methodologies.
• Experience evaluating security controls and recommending remediation strategies.
• Ability to manage multiple concurrent assessments and deliver within tight timelines.
• Excellent communication, presentation, and stakeholder management skills.

 

 

 

Rohit Chauhan IT Recruiter E: rohit.c@noviainfotech.com www.noviainfotech.com A: 4421 Avenida Ln, McKinney, TX, 75070

 

 

--
You received this message because you are subscribed to the Google Groups "NoviaJobs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to noviajobs+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/noviajobs/CAJ0-OE8TFaoz8cC6O2L0CJTomg%2BBuhUnPUyM%3DmLzVywFpM86Og%40mail.gmail.com.