Introduction to arenaflex
At arenaflex, we are on a mission to become the best in the industry, driven by our shared purpose of connecting people and uniting the world. As a global company operating in hundreds of locations worldwide, we recognize the importance of a diverse and inclusive workforce in achieving our goals. With tens of thousands of employees and millions of customers, we are committed to providing opportunities and uplifting the communities where we work, live, and operate. Our careers offer a competitive benefits package designed to keep our employees happy, healthy, and well-traveled, making arenaflex a unique and exciting place to work.
About Our Digital Technology Team
arenaflex's Digital Technology team is a global, diverse group of individuals working together to build the best applications in the industry using cutting-edge technology, innovative architectures, data analytics, and digital solutions. We believe that inclusion propels innovation and is the foundation of all that we do. As part of our team, you will have the opportunity to work with talented professionals from around the world, designing, developing, and maintaining massively scaling technology solutions that bring our vision to life.
Job Overview
We are seeking an experienced Director of Application Cybersecurity to oversee and manage all aspects of cybersecurity related to applications within our organization. This role involves developing, implementing, and maintaining effective cybersecurity strategies, policies, and procedures to safeguard our applications against cyber threats and attacks. The successful candidate will work closely with other departments within Cybersecurity and the broader enterprise to ensure compliance with industry regulations and standards, mitigate cybersecurity risks, and enhance verification and automation processes.
Key Responsibilities
- Team Leadership: Build and lead a team of cybersecurity professionals responsible for application security, providing guidance, mentorship, and professional development opportunities.
- Strategy Development: Develop and implement a comprehensive cybersecurity strategy specifically tailored to protect our organization's applications, integrating verification and automation principles.
- Policy and Procedure Development: Establish and enforce cybersecurity policies and procedures related to application security, including secure coding practices, verification & automation, vulnerability management, and incident response.
- Application Security Assessment: Conduct regular assessments and audits of applications to identify and address security vulnerabilities and ensure compliance with security standards.
- Security Architecture Review: Collaborate with the IT architecture team to review and enhance the security architecture of applications, including recommending security controls and technologies.
- Security Awareness Training: Develop and deliver training programs to educate employees about application security standard processes and raise awareness about potential cyber threats.
- Incident Response Management: Support incident response team in investigating and responding to cybersecurity incidents related to applications, including conducting root cause analysis and implementing corrective actions.
- Compliance and Regulatory Requirements: Stay abreast of industry regulations and standards related to application security.
- Risk Assessment and Management: Identify and assess cybersecurity risks associated with applications and develop risk mitigation strategies to address them.
Qualifications
To succeed in this role, you will need to meet the following minimum qualifications:
- Bachelor's degree in a STEM field.
- 12 years of experience working in security-focused roles.
- Excellent leadership and communication skills, with the ability to collaborate effectively with cross-functional teams.
- Proficiency in security assessment tools and techniques, such as static and dynamic application security testing (SAST and DAST).
- Strong understanding of web application security concepts, including OWASP Top 10 vulnerabilities, with knowledge of verification and automation tools and techniques.
- Extensive experience in cybersecurity roles, with a focus on application security and secure software development practices, including verification and automation.
- Experience in developing and implementing cybersecurity policies, procedures, and standards, with a focus on integrating verification and automation principles.
- Knowledge of regulatory requirements and compliance frameworks related to application security.
- Strong analytical and problem-solving skills.
- Continuous learning mentality to keep up with evolving cybersecurity threats, technologies, and advancements in verification and automation.
- Must be legally authorized to work in the United States for any employer without sponsorship.
- Successful completion of interview required to meet job qualification.
- Reliable, punctual attendance is an essential function of the position.
Preferred Qualifications
The following qualifications will make you a stronger candidate:
- Master's degree.
- 15 years of experience working in security-focused roles.
- Certified Ethical Hacker (CEH).
- GIAC Security Essentials (GSEC).
- Certified Information Security Manager (CISM).
- CompTIA Security.
- Certified Information Systems Security Professional (CISSP).
- Certified Information Systems Auditor (CISA).
- Systems Security Certified Practitioner (SSCP).
- CompTIA Advanced Security Practitioner (CASP).
- Offensive Security Certified Professional (OSCP).
- AWS Solution Architect Pro., Networking, and Security Specializations.
- Knowledge of application security aspects of industrial control networks is a plus.
- Strong experience and in-depth knowledge of Security Technical Implementation Guide standards and implementation.
Salary and Benefits
The salary for this position is $157,725 to $231,330, dependent on job-related, non-discriminatory factors such as experience, education, and skills. This range is based on a full-time schedule. arenaflex offers a competitive compensation package, with benefits including medical, dental, vision, life, accident and disability, parental leave, employee assistance program, commuter, paid holiday, paid time off, 401(k) plan with employee and company contribution opportunities, and flight privileges.
Career Growth Opportunities and Learning Benefits
At arenaflex, we are committed to the growth and development of our employees. As a Director of Application Cybersecurity, you will have access to training and development programs, mentorship opportunities, and a culture that encourages continuous learning and innovation. You will be part of a global team of cybersecurity professionals, working together to protect our applications and systems from cyber threats and attacks.
Work Environment and Company Culture
arenaflex is a dynamic and inclusive workplace, with a culture that values diversity, equity, and inclusion. We believe that our employees are our greatest asset, and we are committed to providing a work environment that is supportive, collaborative, and empowering. As a remote worker, you will be part of a virtual team, with opportunities to connect with colleagues and leaders from around the world.
Conclusion
If you are a motivated and experienced cybersecurity professional, looking for a challenging and rewarding role, we encourage you to apply for the Director of Application Cybersecurity position at arenaflex. With a competitive salary, comprehensive benefits package, and opportunities for growth and development, this is an exciting opportunity to join a global team of cybersecurity professionals and make a meaningful contribution to the protection of our applications and systems. Apply now and take the first step towards a rewarding and challenging career with arenaflex.
Apply Now