Security Architect Specialist

The Security Architecture Specialists will work in the Security Architecture, Engineering and Risk Tower in the CISO organization.  The Specialist will work directly on the AFS IT Enterprise Security Engineering Team (ESE team) within the Security Architecture and Engineering (ITSAE) tower. 

(1) Working to ensure that IT solutions are tracked during the build process to incorporate secure designs and business priorities. 

(2) The candidate will have experience in one or more of the following areas:  cloud security, application security, network security, security plans/procedures, protecting systems from security risk, security data analysis tools, or data security.  

(3) Collaborate with variety of different technology teams within IT and IS to promote collaboration on secure engineering practices.  

(4) Coordinate with IT and Security stakeholders to develop and review security requirement with understanding of external regulations and best practices as well as unique business needs and capabilities.  

The Work

• Provide day-to-day tracking of ATO projects for AFS IT Enterprise Security Engineering Team (ITESE team).   Includes input in project tracking sheets and Summary project tracker.  Provide daily standup input on status of all new apps toward ATO and SIA review.
• Work with ITESE lead to document strategies for IESE and Compliance workflows.
• Implements and interprets ITESE work processes and successfully links them to other processes in Compliance (ConMon).
• Participates in and supports ITESE activities such as assessments of controls for applications, documentation of control responses and development of process improvements.
• Review control assessments for completeness and verify that all components are present and meet the control objectives.  Escalate to ITESE team lead any issues.  Follow up as needed.
• Review and understand where AFS Enterprise Standards should be applied within control reviews of ATO projects and SIA reviews. 
• Creates documentation for new processes as needed and updates Standard Operating Procedures (SOP) during yearly update cycle or as changes are needed.
• Collaborates with ITESE lead and project stakeholders to review requirements and meet service objectives
• Involved in ATO development and assess service requirements and ATO deliverables
• Coordinate meetings with Application Stakeholder teams to gather responses for ATO documents.   
• Attend department, tower and other meetings as assigned. 
• Collaborate with others in IT Enterprise Security Engineering Department (ITESE) and Security Architecture, Engineering, and Risk (ITSAE) tower.

What you need

• U.S. Citizen Requires
• 2-3 years of working experience information security or relevant experience.
• Experience with NIST 800-171 r2 or NIST 800-53
• Knowledge of US Security requirements
• Familiarity with policy, standard, procedure and baseline structure.
• Openness to, and ability to deal with, rapid change in business needs, processes and technologies

Bonus if you have

• 2+ years of working experience in security architecture or relevant experience.
• Prior experience performing ongoing maintenance and operations of security technologies (e.g. management of firewalls, IDS/IPS, endpoint security, etc.)
• Good understanding of secure web application network protocols (HTTP(S), TLS, SFTP, etc.)
• Understanding and experience with US security requirements related to regulations/standards such as NIST SP 800-171, 800-53, RMF, SOX, DFARS etc.
• Experience using Agile within project or architecture /engineering teams
• Certifications: CC, CISA