Application Security Solution Architect - AVP - Information Security - IT

Responsibilities

• Architectural Oversight : Ensure that the information and cybersecurity architecture and solution designs for applications are engineered according to specifications and within acceptable risk tolerance levels, focusing on application-specific contexts.
• Support Development Teams : Collaborate with development teams to implement application-specific threat modeling, secure coding practices, and the effective use of application security assurance tools to enhance the security of software products.
• Integration Architecture Rmendations : Provide expert rmendations on application-level integration architecture, focusing on secure coding practices, web application firewalls, softwareposition analysis, static and dynamic code scanning, Software Bill of Materials (SBOM), and security measures within CI / CD pipelines, all crucial for securing application deployments.
• Application Security Assurance Tool Experience : Leverage experience with application security assurance tools, including onboarding, triaging issues, and assisting developers, to ensure that applications are built and maintained with robust security measures.
• Collaboration with Security Engineering : Work closely with the Security Engineering team to integrate security solutions into application development processes, ensuring that security is a fundamental aspect of the application lifecycle.
• Requirement Creation and Review : Develop and review functional and non-functional security requirements specifically tailored for application projects, ensuring these requirements enhance the security posture of applications.
• System Architecture Review : Conduct thorough reviews of application architecture and designs to ensure that all solutions have undergone appropriate security assurance and meet established security acceptance criteria, thereby protecting applications from vulnerabilities.
• Security Reference Patterns Development : Create and present application security reference patterns and technical security standards that guide secure application development, ensuringpliance with the Information Security Policy.
• Data Security : Create or review implementation of data layer protective and detective control patterns for data storage technologies, from high level SAAS applications to specific technologies, such as Databases, Kafka queues, object storage systems.
• Kubernetes / Cloud Security Expertise : Apply knowledge of Kubernetes / Cloud security technologies to enhance the security of applications deployed in containerized environments, addressing specific risks associated with cloud-native applications.
• Application Architecture Understanding : Demonstrate aprehensive understanding of application architecture to apply relevant security controls and systems, minimizing cybersecurity risks specific to the application's design and functionality.
• Collaborative Project Delivery : Work collaboratively with project delivery and operational teams to ensure that applications are delivered on time and meet high-quality security standards throughout the system delivery lifecycle.

Job Requirement :

Academic and Professional Qualifications Required :

Required Knowledge and Level of Experience :

Optional Knowledge and Experience :

Skills set and Corepetencies Required for Role :

Personal Qualities :

HKEX ismitted as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location : HKEX - TKO

Shift : N / A

Scheduled Weekly Hours :

Worker Type :

Permanent Job ID R002357