FAQs
What is the primary role of the Principal Architect - Application Cybersecurity?
The primary role of the Principal Architect - Application Cybersecurity is to ensure that services, applications, and websites are designed and implemented according to United's secure development standards. This includes integrating security into the product lifecycle from design through deployment and serving as a trusted advisor to various teams within the organization.
What qualifications are needed to apply for this position?
To apply for this position, candidates need a bachelor's degree in a STEM field, a minimum of 9 years of experience in a related field, a deep understanding of OWASP Top 10 and CWE 25, experience in application risk assessment, knowledge of security standards and best practices, and strong problem-solving skills, among others.
Are there preferred qualifications for this job, and what are they?
Yes, the preferred qualifications include a master's degree, relevant certifications (such as CEH, CISM, CISSP), 12 years of experience in related fields, familiarity with application penetration testing, experience with secure SDLC frameworks, and knowledge of multiple programming languages.
Does this position require collaboration with other teams?
Yes, the Principal Architect works closely with development teams, product teams, and other teams across the organization to integrate security practices and communicate risks effectively.
What skills are essential for success in this role?
Essential skills for success in this role include excellent problem-solving and critical thinking, strong interpersonal and collaboration abilities, written and verbal communication skills, and the ability to work independently and self-motivate.
Is this position remote, and are there any geographical restrictions?
Yes, this position is remote, but candidates must be legally authorized to work in the United States for any employer without sponsorship.
What kind of security assessments will the Principal Architect be responsible for?
The Principal Architect will be responsible for conducting application security assessments, performing code analysis (both manually and with tools such as SAST, DAST, and SCA), and providing remediation guidance and advice to development teams.
How does this role contribute to the overall security strategy of the organization?
This role promotes and contributes to the continuous improvement of the security strategy, provides guidance for risk prioritization, and assists in the integration of security best practices into the development process to enhance the organization’s overall security posture.
What is the importance of secure coding standards in this role?
Secure coding standards are crucial as the Principal Architect helps integrate them into the development lifecycle to mitigate risks, prevent vulnerabilities, and ensure that security is a primary consideration during application design and deployment.
Will the Principal Architect have a role in training team members?
Yes, the Principal Architect is responsible for helping train and support team members, thereby fostering a culture of security awareness and competence within the organization.