Senior Application Security Architect

2 weeks ago


Cary, United States SAS Full time

Senior Application Security Architect

Job Locations US-NC-Cary HQ | US-Remote Requisition ID 20059145 Category Product Strategy Visa Sponsorship No Travel Requirements None

Senior Application Security Architect- Remote or Hybrid

Nice to meet you

We’re the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers.

We’re also a debt-free multi-billion-dollar organization on our path to IPO-readiness. If you're looking for a dynamic, fulfilling career coupled with flexibility and world-class employee experience, you'll find it here.

About the job

The Product Security team in our R&D divisionis looking for a Senior Application Security Architect to contribute to software security design efforts across all of Research and Development. Successful candidates will solve complex technical problems, work closely with engineering teams, and communicate clearly and effectively with technical audiences. This position requires a diverse set of skills in application security, software development, and systems architecture. Your success will depend on your cooperative skills in working with R&D architecture and engineering teams across SAS.

As a Senior Application Security Architect, you will:

Work with development teams in building secure products and secure assessments of products in our pipelines. Review application architecture, identify security gaps, and help improve the security posture of business-critical multi-tier applications in legacy, hybrid cloud, and public cloud environments with refactoring and promotions between the environments. Perform periodic secure design and coding assessments to diagnose, triage, and propose remediations for vulnerabilities and weaknesses in code and applications, considering code, design, and deployment. Work with Product Management to ensure changes are consistent with business objectives and customer requirements. Plan evolutionary paths for secure SAS software architectures, incorporating dependent third-party architectural changes and new technology adoption. Identify, train, and partner with champions for security in engineering and product teams. Support security champions by helping them assess risk, learn to identify architectural gaps, and similar activities. Create secure engineering documentation, guidance, and similar collateral. Coach and train teams in topics related to security architecture, threat modeling, and secure coding. Mentor other security architects on the team. Collaborate with other teams within security to identify new tools and processes to integrate into the Secure software development lifecycle. Recommend and promote software security policies, standards, and procedures that influence the global security posture of the company. 

Required Qualifications

8 years of secure software development, secure system architecture and design, or related experience. 4+ years of experience in developing or adopting software security best practices. Bachelor's degree with major study in Data Communications, Electrical Engineering, or Computer Science. SANS, GIAC, or ISACA certification, CEH, CCSP, CSSLP, CISM, or CISSP certification. Knowledge of current Global Enterprise security risks. 2+ years of recent or current software development experience in order to review code and be comfortable in guiding developers towards security practices. Experience with one or more of the following programming languages: Python, Java, JavaScript, C/C++, PHP, SQL, Golang. Expertise in securing enterprise web applications and familiarity with OWASP Top 10, CVSS, CWE and SANS-25. An equivalent combination of related education, training and experience may be considered in place of the above qualifications. You’re curious, passionate, authentic and accountable. These are ourand influence everything we do.

Preferred Qualifications

Experience with Azure (preferred), AWS, GCP, Oracle, or IBM. Experience with Software Security tools, such as: Veracode, Snyk, Black Duck, Metasploit, Checkmarx, SonarQube. Experience with Web Application Security Tools, such as: ZAP, Wfuzz, Grabber, Burp, Vega, W3af. Knowledge of and experience with auditing, implementing, and supporting DevSecOps.

World-Class Benefits  

Highlights include...

Comprehensive medical, prescription, dental and vision plans. Medical plan options include...PPO with low annual deductible and copays.HDHP combined with a health savings account with a contribution from SAS (no access to on-site health care center). Onsite Health Care Center (HQ) that’s free to employees and family members enrolled in the PPO plan. There's a pharmacy too Not local to HQ? The pharmacy will ship prescriptions for no additional charge An industry-leading 401k plan. Generous time away including vacation time, a variety of paid holidays, and our much-loved U.S. Winter Wellness Break between December 25 and January 1. Volunteer Time Off, parental leave and unlimited paid sick days. Generous childcare benefits for all full-time employees.

Diverse and Inclusive

At SAS, it’s not about fitting into our culture – it’s about adding to it. We believe our people make the difference. Our diverse workforce brings together unique talents and inspires teams to create amazing software that reflects the diversity of our users and customers. Our commitment to diversity is a priority to our leadership, all the way up to the top; and it’s essential to who we are. To put it plainly: you are welcome here.



  • Cary, United States SAS Full time

    Senior Application Security Architect- Remote or Hybrid Nice to meet you! We’re the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers. We’re also a debt-free multi-billion-dollar organization on our path to IPO-readiness. If you're looking for...


  • Cary, United States SAS Full time

    Job Description Senior Application Security Architect- Remote or Hybrid Nice to meet you! We’re the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers. We’re also a debt-free multi-billion-dollar organization on our path to IPO-readiness. If...


  • Cary, United States SAS Full time

    : Senior Application Security Architect- Remote or Hybrid Nice to meet you! Were the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers. Were also a debt-free multi-billion-dollar organization on our path to IPO-readiness. If you're looking for a...


  • Cary, United States SAS Full time

    Application Security Architect- Remote or Hybrid Nice to meet you! We’re the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers. We’re also a debt-free multi-billion-dollar organization on our path to IPO-readiness. If you're looking for a...


  • Cary, United States SAS Full time

    Job Description Application Security Architect- Remote or Hybrid Nice to meet you! We’re the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers. We’re also a debt-free multi-billion-dollar organization on our path to IPO-readiness. If you're...


  • Cary, North Carolina, United States MetLife Full time

    Description and Requirements Role Value Proposition: MetLife is a leader in providing insurance and protection products to customers around the globe. MetLife has undertaken a digital transformation journey to deliver innovative and industry-leading digital solutions, employing cutting-edge cloud and engineering technologies, and agile development practices....


  • Cary, United States Nasuni Full time

    DescriptionSenior Solution Architect The Senior Solutions Architect is a senior-level role focused on ensuring the best design & integration of Nasuni technology for large, enterprise customers and those with demanding use cases. This role is focused on ensuring that customer technical requirements are explored, understood, and captured to ensure that the...


  • Cary, United States Elevance Health, Inc. Full time

    Maintains active relationships with customers to determine business requirements and leads requirements gathering meetings. Owns the change request process and may coordinate with other teams as necessary. Provides technical advice and weighs in on t Security Engineer, Application, Security, Engineer, Senior, .Net, Technology, Healthcare


  • Cary, United States MetLife Full time

    Role Value Proposition: MetLife is a leader in providing insurance and protection products to customers around the globe. MetLife has undertaken a digital transformation journey to deliver innovative and industry-leading digital solutions, employing innovative cloud and engineering technologies, and agile development practices. As Principal Identity Security...


  • Cary, North Carolina, United States Elevance Health Full time

    Senior Application Security EngineerLocation: This position will work a hybrid model (remote and office). The Ideal candidate will live within 50 miles of one of our Elevance Health PulsePoint locations.Preferred Location: Cary, NC.The Senior Application Security Engineer is responsible for delivery of end to end application, system development and...


  • Cary, United States MetLife Full time

    Role Value Proposition: MetLife is a leader in providing insurance and protection products to customers around the globe. MetLife has undertaken a digital transformation journey to deliver innovative and industry-leading digital solutions, employing innovative cloud and engineering technologies, and agile development practices. As Principal Identity Security...


  • Cary, United States Elevance Health Full time

    Senior Application Security Engineer Location: This position will work a hybrid model (remote and office). The Ideal candidate will live within 50 miles of one of our Elevance Health PulsePoint locations. Preferred Location: Cary, NC. The Senior Application Security Engineer is responsible for delivery of end to end application, system development and...


  • Cary, United States MetLife Services and Solutions, LLC Full time

    Description and Requirements Role Value Proposition: MetLife is a leader in providing insurance and protection products to customers around the globe. MetLife has undertaken a digital transformation journey to deliver innovative and industry-leading digital solutions, employing innovative cloud and engineering technologies, and agile development practices. ...


  • Cary, United States Elevance Health Full time

    Job Description : Senior Application Security Engineer Location: This position will work a hybrid model (remote and office). The Ideal candidate will live within 50 miles of one of our Elevance Health PulsePoint locations. Preferred Location: Cary, NC. The Senior Application Security Engineer is responsible for delivery of end to end...


  • Cary, United States SAS Full time

    Job Description Senior Technical Architect, SAS Viya- Remote or Hybrid | Cary, NC Nice to meet you!   We’re the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence – and questions into answers. We’re also a debt-free multi-billion-dollar organization on our path to...


  • Cary, United States Blackbaud Full time

    We’re hiring on the Blackbaud Application Security team! As a member of the Cyber Security organization at Blackbaud, the Application Security Engineer is a specialized position that plays a key role in securing software built and/or used by Blackbaud. You can expect to work closely with software development teams as well as third-party organizations to...


  • Cary, United States SAS Full time

    Job Description Senior Technical Architect, Fraud & Risk - Remote or Hybrid | Cary, NC Nice to meet you!   We’re the leader in analytics. Through our software and services, we inspire customers around the world to transform data into intelligence – and questions into answers. We’re also a debt-free multi-billion-dollar organization on our path to...


  • Cary, United States MetLife Full time

    Role Value Proposition: MetLife's Global Application Security team's mission is to identify, protect, detect, respond, and recover from threats to business applications in near real-time. This is a hands-on technical role where you will be accountable for the timely delivery of application security compliance testing. As an Application Security Analyst, you...


  • Cary, United States MetLife Full time

    Description and Requirements Role Value Proposition: MetLife's Global Application Security team's mission is to identify, protect, detect, respond, and recover from threats to business applications in near real-time. This is a hands-on technical role where you will be accountable for the timely delivery of application security compliance testing....


  • Cary, North Carolina, United States MetLife Full time

    Description and Requirements Role Value Proposition: MetLife's Global Application Security team's mission is to identify, protect, detect, respond, and recover from threats to business applications in near real-time. This is a hands-on technical role where you will be accountable for the timely delivery of application security compliance testing. As an...