Application Security Architect
Bentley Systems
- Mafra, Lisboa
- Permanente
- Horário completo
- Define security best practices and standards.
- Perform security architecture and design reviews of applications.
- Work independently with developers to ensure secure design, development, implementation, and verification of applications.
- Provide remediation guidance and recommendations to developers and administrators.
- Lead Secure Software Development Lifecycle best practices and standards.
- Participate in and advance threat modeling practices.
- Help stakeholders make risk-based decisions.
- Train developers and create educational presentations.
- Develop tools and automation supporting responsibilities.
- 4-7 years of application Security Architecture experience.
- Background experience in software and development.
- Strong experience in threat modeling software systems.
- Proficiency in reading, writing, and auditing code and the ability to learn new languages/technologies.
- Proficiency in cloud technologies
- Experience with OWASP Top10 or SANS Top 25
- Experience breaking down complex systems and applications to identify threats.
- Certification in CISSP or CCSP, it's a plus.
- Strong problem-solving capabilities using various technologies.
- Capability to research a new topic and to learn quickly.
- Excellent ability to communicate, verbally and in writing, complicated technical issues and the risks they pose to developers, network engineers, system administrators, and management.
- Requires sitting or standing at will while performing work on a computer (or any other physical requirements). The role requires communication with managers, peers, and other colleagues of the company in person, and by utilizing Microsoft Teams chat, calling, and meeting functions.
- Knowledge/Experience of containerization solutions, such as Kubernetes, Docker, and Istio.
- Knowledge/Experience of web technologies (JavaScript, HTML5, HTTP, REST, SOAP, etc.).
- Good knowledge of some of the following programming platforms/languages: .Net Core. Node.js, C#, Java, JavaScript/TypeScript, C/C++.
- Knowledge of OAuth 2.0/OpenID Connect.
- Ability to make risk-based, unbiased, judgments that include both technical and business impacts.
- A great Team and culture - please see our
- An exciting career as an integral part of a world-leading software company providing solutions for architecture, engineering, and construction.
- Competitive Salary and benefits
- The opportunity to work within a global and diverse international team.
- A supportive and collaborative environment