Application Security Architect

Job Title: Application Security Architect

Area: Technology Services & Information Security

Reports to: Security Officer

Classification: Exempt

Location: Evanston, IL

This position is designated as Hybrid - Fully Flexible and expected to work from our world headquarters office once per month to several times a week. The specific days in the office are determined by managers based on business requirements. Rotary is under the jurisdiction of Illinois employment laws; we require all employees to live within reasonable daily commuting distance to Evanston.

Organization Overview

Rotary is a membership organization that unites people from all continents and cultures who take action to deliver real, long-term solutions to pressing issues facing our communities and the world. Each year, Rotary members expand their networks, build lasting relationships, and invest more than $300 million and 16 million volunteer hours to improve lives and create positive change in the world. In exchange for hard work and dedication in support of Rotary’s clubs, members and other participants, and their humanitarian service projects, our employees receive competitive salaries, flexible schedules, comprehensive benefits, and job enrichment. To learn more, visit http://www.rotary.org.

Rotary’s Commitment to Belonging

At Rotary, we foster a welcoming environment where all employees are valued and empowered. We are dedicated to creating meaningful opportunities and supporting the growth and well-being of our team. Join us in building a world where everyone can unite, take action, and create lasting change.

Position Overview

As an Application Security Architect, you will be responsible for implementing a security application program, including implementing application security tools, determine application training requirements, and working with architecture review board in ensuring we have security best practices integrated into the software development lifecycle. In addition, you will be responsible for the overall security architecture and assisting the Information Security Officer in implementing the overall security strategy.

You Will Have

• Bachelor’s degree in computer science, Information Security, or a related field preferred.
• Security related certifications preferred
• 5 years of experience in IT and application architecture and security technologies
• Familiarity with security standards and frameworks such as NIST, CIS, GDPR, MITRE ATT&CK, etc.
• Experience with performing architecture reviews to steer projects in the right direction early, lead security reviews, and develop security ownership
• Experience with application scanning tools (i.e. Snyk, Rapid7, Checkmarx, SonarQube ) implementation and integration with CI/CD pipeline
• Good understanding of Threat and Vulnerability Management, SIEM, EDR, DMARC, DKIM, DLP, and PKI
• Knowledge of cyber risk quantification methodologies
• Ability to collaborate with experienced and innovative leaders who share a clear vision and a track record of success
• The ideal candidate will have hands on experience and a good understanding of security in data centers and in the cloud across networked infrastructure, application, and data
  
  

You Will Be Responsible For

Security Architecture and Design

• Lead security architecture direction for solutions as well as influence peers, cross functional partners, and IT leadership
• Consult and lead the design of security best practices and implementation of solid security principles across the organization, to meet business goals along with customer and regulatory requirements
• Review solution design for compliance to Information Security Standards
• Design, build and implement enterprise-class security systems for cloud and on-prem production environments
• Ensure the organization implements a security architecture that enables Rotary to grow but also keeps infrastructure and customer data secure
  
  

Application Security Management

• Design, implement and maintain application security architecture framework
• Review application architecture diagrams, data flow diagrams, and network diagrams and advise on non-compliance issues
• Perform and document threat modeling and reviews
• Supporting the security awareness program by providing documented examples and training sessions to developers and engineers
• Coordinate with application teams to implement application security monitoring
  
  

Security Documentation and Evangelism

• Refine our Security efforts in further defining our processes, procedures, and controls for cloud-based tolerant systems that require stringent data security
• Effectively communicate security risk to various audience levels
• Provides security requirements and recommendations on solution design to technical and business teams
• This is a position of critical importance; it involves close coordination with key members of Technology Services and Product teams
  
  

Leadership Attributes

• Communication: Be open to receiving ideas from diverse viewpoints and able to communicate messages so that they are universally understood.
• Collaboration: Builds partnerships and works jointly with others to meet shared objectives.
• Accountability: Have a clear sense of ownership and take personal responsibility for actions.
  
  

Salary range

$157,500 - $175,000

Why Work For Rotary?

• Generous medical, dental, and vision benefits package
• Progressive 401k matching contributions
• Above market and generous paid time off package
• Tuition reimbursement
• Professional development opportunities
• On-site cafeteria and coffee bar with special pricing for Rotary employees
• Flextime-several different work schedules to choose from
• Close to CTA, Metra, a variety of stores, and many food options