Senior Security Architect

10 Months ago • 3 Years +

Job Summary

Job Description

Senior Security Architect role at ION Group requires extensive experience in Threat Modeling, cloud security (AWS/Azure), secure microservices, and managing security in public clouds. Strong understanding of networking, OWASP Top 10, and penetration testing is essential.
Must have:
  • Threat Modeling
  • Cloud Security
  • Secure Microservices
  • Public Cloud Security
Good to have:
  • Kubernetes
  • Openshift
  • Service Mesh
  • ISO 27001

Job Details

About us
We’re visionary innovators who provide trading and workflow automation solutions, high-value analytics, and strategic consulting to corporations, financial institutions, central banks, and governments. More than 40% of the world’s largest companies use our solutions. We’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.
At ION, we offer careers that provide many opportunities: To invent. To design. To collaborate. To build. To transform businesses and empower people around the world to do more, faster and better than before. Imagine what you can do and experience. This is where you can do your best work.
Learn more at iongroup.com.
 
Your role
Your duties and responsibilities
•        Establish policies and procedures that promote secure development/cloud principles.
•        Enable security automation through tools to reduce vulnerabilities and flaws due to human errors.
•        Automate audit evidence collection throughout the SDLC to facilitate compliance reporting.
•        Monitor security metrics to continuously improve and stay one step ahead of the red team.
•        Maintain strong and continuous engagement with teams to ensure the ION Cloud architecture and operating model is up to the top security standards.
•        Create a state-of-the-art secure cloud architecture and strategy, supported by a robust and flexible infrastructure with reliable and efficient operating model.
•        Run post-mortem incidents analysis.
•        Review the security principles compliancy of deployment, maintenance, monitoring, and management processes.
•        Cooperate with the software architect to ensure that security aspects are considered in the software architecture.
•        Regularly evaluate the best cloud applications, hardware, and practices available in the security domain.
•        Provide training and guidance to the rest of the organization, helping with the development of a security culture throughout the company.
•        Help the product owner in refining security requirements so that they fit in the customer’s strategy and becomes selling point.
Other duties
We might ask you to perform other tasks and duties as your role expands.

Your skills, experience, and qualifications
Skills
•        Threat Modeling.
•        Authentication/authorization standards and implementations
•        Application of encryption at rest and in transit
•        Certificates/secrets standards and implementations
•        Managing security in public clouds ( AWS, Azure, GCP), with at least 3 years specific experience in either AWS or Azure.
•        Secure microservices architectures in a cloud-native environment.
•        Strong understanding of networking.
•        Knowledge of different deployment models (Container, Serverless, Cloud, PaaS, IaaS …).
•        Ability to work with diverse, remote, and distributed teams across multiple regions and time zones.
•        Ability to do research autonomously to always be ahead of any security threat.
•        SSDLC practices in DevOps, CI/CD environment.
•        OWASP Top 10, SANS CWE, OpenSAMM, BSIMM, etc.
•        Penetration testing, vulnerability scanning
•        Design security monitoring tools.
•        Designing pipelines that make use of SCA, SAST, DAST, IAST and RASP solutions.

Qualifications
•        SANS/SEC-540: Cloud Security and DevSecOps Automation
•        Systems Security Certified Practitioner (SSCP)
•        Certified Information Systems Security Professional (CISSP)
•        Certified Authorization Professional (CAP)
•        Certified Secure Software Lifecycle Professional (CSSLP)
•        HealthCare Information Security and Privacy Practitioner (HCISPP)

Experience
•        Multi-year experience in Threat Modeling.
•        A proven track record as architect and consultant, capable of working directly with teams, embedded in the delivery model.
•        Experience with Kubernetes, Openshift, Service Mesh.
•        Experience with clouds (AWS, Azure, GCP)
•        Experience with getting or maintaining certified standards (i.e. ISO 27001, PCI DSS, MIL-SPEC)

Contract Type
•        Full-time, permanent contract.


Important notes (Italy)
According to the Italian Law (L.68/99) Please note that candidates from the disability list will be given priority.
Due to the high volume of applications, only those candidates that meet the required criteria for selection will be contacted.
If you’re from a non-EU country, you must have a valid EU visa or work permit.
undefinedundefinedundefined

Similar Jobs

Mark43 - Deal Desk Analyst

Mark43

California, Ontario, Canada (Remote)
3 Weeks ago
Ion - Senior Security Architect

Ion

Collecchio, Emilia-Romagna, Italy (On-Site)
10 Months ago
SSC Technologies - Compliance Reporting Specialist

SSC Technologies

Kansas City, Missouri, United States (Hybrid)
1 Year ago
Playq - Senior Manager, Finance and Accounting

Playq

Santa Monica, California, United States (Hybrid)
2 Months ago
PwC - Insurance Transformation Manager

PwC

Brussels, Brussels, Belgium (On-Site)
2 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

gnosis - AML/Compliance Analyst

gnosis

Lisbon, Lisbon, Portugal (Remote)
1 Month ago
ARHS - Cloud Engineer / Security and Compliance Specialist

ARHS

Brussels, Brussels, Belgium (Remote)
8 Months ago
Intel  - Revenue Accounting Operations Director

Intel

Hillsboro, Oregon, United States (On-Site)
2 Months ago
Ion - Senior Security Architect

Ion

London, England, United Kingdom (On-Site)
10 Months ago
deel. - BI Report Specialist

deel.

South Africa (Remote)
2 Weeks ago
Nahc.io - Bank Compliance Officer

Nahc.io

Dubai, Dubai, United Arab Emirates (On-Site)
2 Months ago
Roblox - Regulatory Compliance Product Manager, Transparency Reporting

Roblox

San Mateo, California, United States (On-Site)
1 Month ago
Aptive - Senior Manager, Application Portfolio Management

Aptive

Kraków, Lesser Poland Voivodeship, Poland (On-Site)
2 Weeks ago
Rippling - Global Payroll Lead - German Payroll Subject Matter Expert

Rippling

Germany (Remote)
2 Months ago
ISS Stoxx - Tax Specialist

ISS Stoxx

Makati City, Metro Manila, Philippines (Hybrid)
3 Months ago

Get notifed when new similar jobs are uploaded

Jobs in Pisa, Tuscany, Italy

WebTech Corporation - Project Buyer

WebTech Corporation

Turin, Piedmont, Italy (On-Site)
1 Month ago
Ion - Talent Acquisition & Development Specialist, Italy

Ion

Milan, Lombardy, Italy (Hybrid)
10 Months ago
meetup - Software engineer intern

meetup

Milan, Lombardy, Italy (Remote)
2 Weeks ago
Ion - Cloud Network Engineer

Ion

Italy (Hybrid)
10 Months ago
Ion - Business Analyst - Graduate Development Program

Ion

Pisa, Tuscany, Italy (On-Site)
10 Months ago
Cadence - Application Engineer in Milan for SPB

Cadence

Milan, Lombardy, Italy (On-Site)
1 Week ago
Ion - Java Developer, Italy

Ion

Italy (Hybrid)
10 Months ago
Ion - Data Engineer, Italy

Ion

Italy (Hybrid)
10 Months ago
Ion - Senior Software Engineer, Italy

Ion

Rome, Lazio, Italy (On-Site)
10 Months ago
Ion - Senior Risk Analyst, Italy

Ion

Milan, Lombardy, Italy (On-Site)
10 Months ago

Get notifed when new similar jobs are uploaded

Similar Category Jobs

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

About The Company

We’re visionary innovators who are delivering mission-critical trading and workflow automation software to financial institutions, corporations, central banks, and governments. By combining our passion for automation with a strategic view on the industries we serve, we design solutions that improve decision-making, simplify complex processes, and empower people. Simply put, we help our customers do more, faster and better than before. We believe our investments in research and development are shaping the future of automation and enabling our customers to transform their business. And we embrace the power of community, working with each other and with our customers to succeed through a positive culture of continuous improvement.

Jersey City, New Jersey, United States (On-Site)

Mumbai, Maharashtra, India (On-Site)

Noida, Uttar Pradesh, India (On-Site)

Houston, Texas, United States (On-Site)

London, England, United Kingdom (On-Site)

London, England, United Kingdom (On-Site)

Woking, England, United Kingdom (On-Site)

Toronto, Ontario, Canada (On-Site)

View All Jobs

Get notified when new jobs are added by Ion

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug