Security Architect

The Security Architect will be a technical expert with deep knowledge of various security domains as well as expert knowledge of underlying technologies.

This position will be a proven technical leader in the security industry capable of driving security architecture discipline across the organization.

Responsibilities

Responsibilities include but are not limited to:

• Participate in development and implementation of security architecture principles and standards.

Drive adoption and compliance of these standards across development and infrastructure teams both inside of and under contract with BCBSA.

• Serve as a core team member of the security architecture function developing functional and technical security requirements and seeing them through the project lifecycle.

• Provide security consulting including design, reviews and recommendations for various IT projects and initiatives.

• Provide hands-on engineering support for technologies owned and operated by the security organization.

• Design build and deploy security solutions supporting enablement of cloud application deployments.

• Research and monitor emerging security technologies, understand current industry and technology trends and opportunities, and assess their impact to the business.

• Conduct research to identify new attack vectors facing BCBSA computing environment.

• Work with and influence business contacts in regards to technology controls, risk mitigation techniques related to application layer security.

• Provide engineering support in maturing and automating existing security processes.

• Develop and maintain applicable security architecture program metrics for continual measurement and improvement.

• Collaborate with Enterprise Architecture to define and promote architecture processes, standards and patterns.

• Demonstrate a commitment to BCBSA core values of safety, integrity, process improvement, and customer satisfaction.

• Ability to develop and maintain basic code in order to automate security processes.

Qualifications

Required Basic Qualifications:

• Bachelor degree in Computer Science, Information Technology or equivalent experience required

• 7+ years of experience in various security domains including security engineering.

• Technology Experience Preferred: Java and the J2EE Environment, strong UNIX administration skills, scripting and automation experience, strong understanding of cryptographic algorithms and principles, strong understanding of networking fundamentals, addressing, TCP/IP, protocol and network analysis.

• Subject matter expertise in web application security.

• Expert in application security and development processes.

• Possess an understanding of systens programming, graphical user interfaces and control languages.

• Technical domain knowledge in three or more areas of concentrated technical expertise.

Preferred Basic Qualifications:

• MBA or MS degree

• Ability to present to top management, corporate committees, and workgroups and to communicate information security and risk management concepts

• Demonstrated ability making operational decisions, monitoring progress and reporting results

• Certified Information Systems Security Professional (CISSP)

Equal Opportunity Employer

Blue Cross Blue Shield Association is an equal opportunity employer.

We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, national origin, age, gender identity, disability, veteran status, genetic information or any other legally protected characteristics