Application Security Architect
Austin (Oakhill, Office), United States
NXP Semiconductors
1. Application Security Strategy:
- Develop and maintain a comprehensive application security strategy aligned with business objectives and regulatory requirements.
- Define security standards, policies, and best practices for application development and deployment.
- Ensure application security is integrated throughout the software development lifecycle (SDLC).
2. Secure Design and Architecture:
- Design secure application architectures for web, mobile, and cloud-based platforms.
- Evaluate and recommend security tools for code review, vulnerability scanning, and application testing.
- Ensure robust access control, authentication, and encryption mechanisms are in place for applications.
3. Risk Assessment and Mitigation:
- Perform security assessments of applications, identifying vulnerabilities and recommending mitigations.
- Develop threat models and conduct application penetration testing to uncover potential risks.
- Work with development teams to remediate vulnerabilities in code and design.
4. Collaboration and Integration:
- Partner with software engineering and DevOps teams to embed security into CI/CD pipelines.
- Provide technical leadership and guidance on secure development practices.
- Collaborate with stakeholders to ensure application security aligns with overall enterprise security goals.
5. Compliance and Governance:
- Ensure applications comply with industry standards, regulatory requirements, and internal policies.
- Contribute to the creation and maintenance of application security documentation and training materials.
- Stay updated on emerging security regulations and their impact on application development.
6. Education and Awareness:
- Conduct training and awareness sessions for developers and engineers on secure coding practices.
- Advocate for a security-first mindset within development teams.
- Monitor and respond to emerging application security threats and vulnerabilities.
More information about NXP in the United States...
NXP is an Equal Opportunity/Affirmative Action Employer regardless of age, color, national origin, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, marital status, status as a disabled veteran and/or veteran of the Vietnam Era or any other characteristic protected by federal, state or local law. In addition, NXP will provide reasonable accommodations for otherwise qualified disabled individuals.
#LI-97b2* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Application security CI/CD Cloud Compliance DevOps Encryption Governance Pentesting Risk assessment SDLC Security assessment Security strategy Strategy Vulnerabilities
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.